]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - drivers/net/wireless/iwlwifi/mvm/mac80211.c
projects / mirror_ubuntu-bionic-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
iwlwifi: mvm: fix EBS on single scan
[mirror_ubuntu-bionic-kernel.git] / drivers / net / wireless / iwlwifi / mvm / mac80211.c
CommitLineData
8ca151b5
JB		 1/******************************************************************************
2 *
3 * This file is provided under a dual BSD/GPLv2 license. When using or
4 * redistributing this file, you may do so under either license.
5 *
6 * GPL LICENSE SUMMARY
7 *
51368bf7 8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
8b4139dc 9 * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
8ca151b5
JB		 10 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of version 2 of the GNU General Public License as
13 * published by the Free Software Foundation.
14 *
15 * This program is distributed in the hope that it will be useful, but
16 * WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
18 * General Public License for more details.
19 *
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
23 * USA
24 *
25 * The full GNU General Public License is included in this distribution
410dc5aa 26 * in the file called COPYING.
8ca151b5
JB		 27 *
28 * Contact Information:
29 * Intel Linux Wireless <ilw@linux.intel.com>
30 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
31 *
32 * BSD LICENSE
33 *
51368bf7 34 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
8b4139dc 35 * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
8ca151b5
JB		 36 * All rights reserved.
37 *
38 * Redistribution and use in source and binary forms, with or without
39 * modification, are permitted provided that the following conditions
40 * are met:
41 *
42 * * Redistributions of source code must retain the above copyright
43 * notice, this list of conditions and the following disclaimer.
44 * * Redistributions in binary form must reproduce the above copyright
45 * notice, this list of conditions and the following disclaimer in
46 * the documentation and/or other materials provided with the
47 * distribution.
48 * * Neither the name Intel Corporation nor the names of its
49 * contributors may be used to endorse or promote products derived
50 * from this software without specific prior written permission.
51 *
52 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
53 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
54 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
55 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
56 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
57 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
58 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
59 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
60 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
61 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
62 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
63 *
64 *****************************************************************************/
65#include <linux/kernel.h>
66#include <linux/slab.h>
67#include <linux/skbuff.h>
68#include <linux/netdevice.h>
69#include <linux/etherdevice.h>
f0c2646a 70#include <linux/ip.h>
2ee8f021 71#include <linux/if_arp.h>
aadede6e 72#include <linux/devcoredump.h>
8ca151b5 73#include <net/mac80211.h>
7b1dd048 74#include <net/ieee80211_radiotap.h>
f0c2646a 75#include <net/tcp.h>
8ca151b5
JB		 76
77#include "iwl-op-mode.h"
78#include "iwl-io.h"
79#include "mvm.h"
80#include "sta.h"
81#include "time-event.h"
82#include "iwl-eeprom-parse.h"
83#include "fw-api-scan.h"
84#include "iwl-phy-db.h"
507cadf2 85#include "testmode.h"
655e6d6d
EG		 86#include "iwl-fw-error-dump.h"
87#include "iwl-prph.h"
8ca151b5
JB		 88
89static const struct ieee80211_iface_limit iwl_mvm_limits[] = {
90 {
91 .max = 1,
8eb38710 92 .types = BIT(NL80211_IFTYPE_STATION),
8ca151b5 93 },
3c15a0fb
JB		 94 {
95 .max = 1,
8eb38710
IP		 96 .types = BIT(NL80211_IFTYPE_AP) |
97 BIT(NL80211_IFTYPE_P2P_CLIENT) |
3c15a0fb
JB		 98 BIT(NL80211_IFTYPE_P2P_GO),
99 },
100 {
101 .max = 1,
102 .types = BIT(NL80211_IFTYPE_P2P_DEVICE),
103 },
8ca151b5
JB		 104};
105
106static const struct ieee80211_iface_combination iwl_mvm_iface_combinations[] = {
107 {
108 .num_different_channels = 1,
109 .max_interfaces = 3,
110 .limits = iwl_mvm_limits,
111 .n_limits = ARRAY_SIZE(iwl_mvm_limits),
112 },
113};
114
f0c2646a
JB		 115#ifdef CONFIG_PM_SLEEP
116static const struct nl80211_wowlan_tcp_data_token_feature
117iwl_mvm_wowlan_tcp_token_feature = {
118 .min_len = 0,
119 .max_len = 255,
120 .bufsize = IWL_WOWLAN_REMOTE_WAKE_MAX_TOKENS,
121};
122
123static const struct wiphy_wowlan_tcp_support iwl_mvm_wowlan_tcp_support = {
124 .tok = &iwl_mvm_wowlan_tcp_token_feature,
125 .data_payload_max = IWL_WOWLAN_TCP_MAX_PACKET_LEN -
126 sizeof(struct ethhdr) -
127 sizeof(struct iphdr) -
128 sizeof(struct tcphdr),
129 .data_interval_max = 65535, /* __le16 in API */
130 .wake_payload_max = IWL_WOWLAN_REMOTE_WAKE_MAX_PACKET_LEN -
131 sizeof(struct ethhdr) -
132 sizeof(struct iphdr) -
133 sizeof(struct tcphdr),
134 .seq = true,
135};
136#endif
137
77736923 138#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
2ee8f021
EP		 139/*
140 * Use the reserved field to indicate magic values.
141 * these values will only be used internally by the driver,
142 * and won't make it to the fw (reserved will be 0).
143 * BC_FILTER_MAGIC_IP - configure the val of this attribute to
144 * be the vif's ip address. in case there is not a single
145 * ip address (0, or more than 1), this attribute will
146 * be skipped.
147 * BC_FILTER_MAGIC_MAC - set the val of this attribute to
148 * the LSB bytes of the vif's mac address
149 */
150enum {
151 BC_FILTER_MAGIC_NONE = 0,
152 BC_FILTER_MAGIC_IP,
153 BC_FILTER_MAGIC_MAC,
154};
155
77736923
EP		 156static const struct iwl_fw_bcast_filter iwl_mvm_default_bcast_filters[] = {
157 {
158 /* arp */
159 .discard = 0,
160 .frame_type = BCAST_FILTER_FRAME_TYPE_ALL,
161 .attrs = {
162 {
163 /* frame type - arp, hw type - ethernet */
164 .offset_type =
165 BCAST_FILTER_OFFSET_PAYLOAD_START,
166 .offset = sizeof(rfc1042_header),
167 .val = cpu_to_be32(0x08060001),
168 .mask = cpu_to_be32(0xffffffff),
169 },
2ee8f021
EP		 170 {
171 /* arp dest ip */
172 .offset_type =
173 BCAST_FILTER_OFFSET_PAYLOAD_START,
174 .offset = sizeof(rfc1042_header) + 2 +
175 sizeof(struct arphdr) +
176 ETH_ALEN + sizeof(__be32) +
177 ETH_ALEN,
178 .mask = cpu_to_be32(0xffffffff),
179 /* mark it as special field */
180 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_IP),
181 },
182 },
183 },
184 {
185 /* dhcp offer bcast */
186 .discard = 0,
187 .frame_type = BCAST_FILTER_FRAME_TYPE_IPV4,
188 .attrs = {
189 {
190 /* udp dest port - 68 (bootp client)*/
191 .offset_type = BCAST_FILTER_OFFSET_IP_END,
192 .offset = offsetof(struct udphdr, dest),
193 .val = cpu_to_be32(0x00440000),
194 .mask = cpu_to_be32(0xffff0000),
195 },
196 {
197 /* dhcp - lsb bytes of client hw address */
198 .offset_type = BCAST_FILTER_OFFSET_IP_END,
199 .offset = 38,
200 .mask = cpu_to_be32(0xffffffff),
201 /* mark it as special field */
202 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_MAC),
203 },
77736923
EP		 204 },
205 },
206 /* last filter must be empty */
207 {},
208};
209#endif
210
7498cf4c
EP		 211void iwl_mvm_ref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
212{
7bb426ea 213 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 214 return;
215
216 IWL_DEBUG_RPM(mvm, "Take mvm reference - type %d\n", ref_type);
576eeee9
EP		 217 spin_lock_bh(&mvm->refs_lock);
218 mvm->refs[ref_type]++;
219 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 220 iwl_trans_ref(mvm->trans);
221}
222
223void iwl_mvm_unref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
224{
7bb426ea 225 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 226 return;
227
228 IWL_DEBUG_RPM(mvm, "Leave mvm reference - type %d\n", ref_type);
576eeee9
EP		 229 spin_lock_bh(&mvm->refs_lock);
230 WARN_ON(!mvm->refs[ref_type]--);
231 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 232 iwl_trans_unref(mvm->trans);
233}
234
576eeee9
EP		 235static void iwl_mvm_unref_all_except(struct iwl_mvm *mvm,
236 enum iwl_mvm_ref_type except_ref)
7498cf4c 237{
576eeee9 238 int i, j;
7498cf4c 239
7bb426ea 240 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 241 return;
242
576eeee9
EP		 243 spin_lock_bh(&mvm->refs_lock);
244 for (i = 0; i < IWL_MVM_REF_COUNT; i++) {
245 if (except_ref == i || !mvm->refs[i])
7498cf4c
EP		 246 continue;
247
576eeee9
EP		 248 IWL_DEBUG_RPM(mvm, "Cleanup: remove mvm ref type %d (%d)\n",
249 i, mvm->refs[i]);
250 for (j = 0; j < mvm->refs[i]; j++)
251 iwl_trans_unref(mvm->trans);
252 mvm->refs[i] = 0;
7498cf4c 253 }
576eeee9 254 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 255}
256
f4cf8680
EP		 257bool iwl_mvm_ref_taken(struct iwl_mvm *mvm)
258{
259 int i;
260 bool taken = false;
261
262 if (!iwl_mvm_is_d0i3_supported(mvm))
263 return true;
264
265 spin_lock_bh(&mvm->refs_lock);
266 for (i = 0; i < IWL_MVM_REF_COUNT; i++) {
267 if (mvm->refs[i]) {
268 taken = true;
269 break;
270 }
271 }
272 spin_unlock_bh(&mvm->refs_lock);
273
274 return taken;
275}
276
576eeee9 277int iwl_mvm_ref_sync(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
d40fc489
GG		 278{
279 iwl_mvm_ref(mvm, ref_type);
280
281 if (!wait_event_timeout(mvm->d0i3_exit_waitq,
282 !test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status),
283 HZ)) {
284 WARN_ON_ONCE(1);
285 iwl_mvm_unref(mvm, ref_type);
286 return -EIO;
287 }
288
289 return 0;
290}
291
fe0f2de3
IP		 292static void iwl_mvm_reset_phy_ctxts(struct iwl_mvm *mvm)
293{
294 int i;
295
296 memset(mvm->phy_ctxts, 0, sizeof(mvm->phy_ctxts));
297 for (i = 0; i < NUM_PHY_CTX; i++) {
298 mvm->phy_ctxts[i].id = i;
299 mvm->phy_ctxts[i].ref = 0;
300 }
301}
302
8ca151b5
JB		 303int iwl_mvm_mac_setup_register(struct iwl_mvm *mvm)
304{
305 struct ieee80211_hw *hw = mvm->hw;
831e85f3 306 int num_mac, ret, i;
8ca151b5
JB		 307
308 /* Tell mac80211 our characteristics */
309 hw->flags = IEEE80211_HW_SIGNAL_DBM |
310 IEEE80211_HW_SPECTRUM_MGMT |
311 IEEE80211_HW_REPORTS_TX_ACK_STATUS |
312 IEEE80211_HW_QUEUE_CONTROL |
313 IEEE80211_HW_WANT_MONITOR_VIF |
8ca151b5
JB		 314 IEEE80211_HW_SUPPORTS_PS |
315 IEEE80211_HW_SUPPORTS_DYNAMIC_PS |
d2931bbd 316 IEEE80211_HW_AMPDU_AGGREGATION |
d64048ed 317 IEEE80211_HW_TIMING_BEACON_ONLY |
147fc9be 318 IEEE80211_HW_CONNECTION_MONITOR |
b71d9c8a
IY		 319 IEEE80211_HW_CHANCTX_STA_CSA |
320 IEEE80211_HW_SUPPORTS_CLONED_SKBS;
8ca151b5 321
19e737c9 322 hw->queues = mvm->first_agg_queue;
398e8c6c 323 hw->offchannel_tx_hw_queue = IWL_MVM_OFFCHANNEL_QUEUE;
7b1dd048
EG		 324 hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FEC |
325 IEEE80211_RADIOTAP_MCS_HAVE_STBC;
339b3086
ES		 326 hw->radiotap_vht_details |= IEEE80211_RADIOTAP_VHT_KNOWN_STBC |
327 IEEE80211_RADIOTAP_VHT_KNOWN_BEAMFORMED;
8ca151b5
JB		 328 hw->rate_control_algorithm = "iwl-mvm-rs";
329
330 /*
331 * Enable 11w if advertised by firmware and software crypto
332 * is not enabled (as the firmware will interpret some mgmt
333 * packets, so enabling it with software crypto isn't safe)
334 */
335 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
336 !iwlwifi_mod_params.sw_crypto)
337 hw->flags |= IEEE80211_HW_MFP_CAPABLE;
338
1504f48d 339 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_UAPSD_SUPPORT &&
1504f48d
MC		 340 !iwlwifi_mod_params.uapsd_disable) {
341 hw->flags |= IEEE80211_HW_SUPPORTS_UAPSD;
4cb832d5 342 hw->uapsd_queues = IWL_MVM_UAPSD_QUEUES;
1504f48d
MC		 343 hw->uapsd_max_sp_len = IWL_UAPSD_MAX_SP;
344 }
e8e626ad 345
d2496221 346 if (mvm->fw->ucode_capa.api[0] & IWL_UCODE_TLV_API_LMAC_SCAN ||
effd05ac 347 mvm->fw->ucode_capa.capa[0] & IWL_UCODE_TLV_CAPA_UMAC_SCAN) {
fb98be5e 348 hw->flags |= IEEE80211_SINGLE_HW_SCAN_ON_ALL_BANDS;
effd05ac
JB		 349 hw->wiphy->features |=
350 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR |
351 NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
352 }
fb98be5e 353
8ca151b5
JB		 354 hw->sta_data_size = sizeof(struct iwl_mvm_sta);
355 hw->vif_data_size = sizeof(struct iwl_mvm_vif);
fe0f2de3 356 hw->chanctx_data_size = sizeof(u16);
8ca151b5
JB		 357
358 hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
3c15a0fb
JB		 359 BIT(NL80211_IFTYPE_P2P_CLIENT) |
360 BIT(NL80211_IFTYPE_AP) |
361 BIT(NL80211_IFTYPE_P2P_GO) |
c13b1725
EG		 362 BIT(NL80211_IFTYPE_P2P_DEVICE) |
363 BIT(NL80211_IFTYPE_ADHOC);
5023d966 364
a2f73b6c
LR		 365 hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
366 hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
367 REGULATORY_DISABLE_BEACON_HINTS;
8ca151b5 368
3e56eadf
JB		 369 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_GO_UAPSD)
370 hw->wiphy->flags |= WIPHY_FLAG_AP_UAPSD;
371
94bbed72 372 hw->wiphy->flags |= WIPHY_FLAG_HAS_CHANNEL_SWITCH;
bd3398e2 373
8ca151b5
JB		 374 hw->wiphy->iface_combinations = iwl_mvm_iface_combinations;
375 hw->wiphy->n_iface_combinations =
376 ARRAY_SIZE(iwl_mvm_iface_combinations);
377
c451e6d4 378 hw->wiphy->max_remain_on_channel_duration = 10000;
8ca151b5
JB		 379 hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
380
381 /* Extract MAC address */
382 memcpy(mvm->addresses[0].addr, mvm->nvm_data->hw_addr, ETH_ALEN);
383 hw->wiphy->addresses = mvm->addresses;
384 hw->wiphy->n_addresses = 1;
831e85f3
IP		 385
386 /* Extract additional MAC addresses if available */
387 num_mac = (mvm->nvm_data->n_hw_addrs > 1) ?
388 min(IWL_MVM_MAX_ADDRESSES, mvm->nvm_data->n_hw_addrs) : 1;
389
390 for (i = 1; i < num_mac; i++) {
391 memcpy(mvm->addresses[i].addr, mvm->addresses[i-1].addr,
8ca151b5 392 ETH_ALEN);
831e85f3 393 mvm->addresses[i].addr[5]++;
8ca151b5
JB		 394 hw->wiphy->n_addresses++;
395 }
396
fe0f2de3
IP		 397 iwl_mvm_reset_phy_ctxts(mvm);
398
48849a41 399 hw->wiphy->max_scan_ie_len = iwl_mvm_max_scan_ie_len(mvm, false);
20f1a5de 400
8ca151b5
JB		 401 hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
402
403 if (mvm->nvm_data->bands[IEEE80211_BAND_2GHZ].n_channels)
404 hw->wiphy->bands[IEEE80211_BAND_2GHZ] =
405 &mvm->nvm_data->bands[IEEE80211_BAND_2GHZ];
406 if (mvm->nvm_data->bands[IEEE80211_BAND_5GHZ].n_channels)
407 hw->wiphy->bands[IEEE80211_BAND_5GHZ] =
408 &mvm->nvm_data->bands[IEEE80211_BAND_5GHZ];
409
410 hw->wiphy->hw_version = mvm->trans->hw_id;
411
ade50652 412 if (iwlmvm_mod_params.power_scheme != IWL_POWER_SCHEME_CAM)
8ca151b5
JB		 413 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
414 else
415 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
416
6efaaf33
EG		 417 if (IWL_UCODE_API(mvm->fw->ucode_ver) >= 10) {
418 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
419 hw->wiphy->max_sched_scan_ssids = PROBE_OPTION_MAX;
420 hw->wiphy->max_match_sets = IWL_SCAN_MAX_PROFILES;
421 /* we create the 802.11 header and zero length SSID IE. */
422 hw->wiphy->max_sched_scan_ie_len =
423 SCAN_OFFLOAD_PROBE_REQ_SIZE - 24 - 2;
424 }
35a000b7 425
8ca151b5 426 hw->wiphy->features |= NL80211_FEATURE_P2P_GO_CTWIN |
ab480030 427 NL80211_FEATURE_LOW_PRIORITY_SCAN |
0d8614b4
EP		 428 NL80211_FEATURE_P2P_GO_OPPPS |
429 NL80211_FEATURE_DYNAMIC_SMPS |
9b5452fd
EG		 430 NL80211_FEATURE_STATIC_SMPS |
431 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION;
8ca151b5 432
f1daa00e
AO		 433 if (mvm->fw->ucode_capa.capa[0] &
434 IWL_UCODE_TLV_CAPA_TXPOWER_INSERTION_SUPPORT)
435 hw->wiphy->features |= NL80211_FEATURE_TX_POWER_INSERTION;
226bcd48
AK		 436 if (mvm->fw->ucode_capa.capa[0] &
437 IWL_UCODE_TLV_CAPA_QUIET_PERIOD_SUPPORT)
438 hw->wiphy->features |= NL80211_FEATURE_QUIET;
f1daa00e 439
73897bd1
AO		 440 if (mvm->fw->ucode_capa.capa[0] &
441 IWL_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT)
442 hw->wiphy->features |=
443 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES;
444
445 if (mvm->fw->ucode_capa.capa[0] &
446 IWL_UCODE_TLV_CAPA_WFA_TPC_REP_IE_SUPPORT)
447 hw->wiphy->features |= NL80211_FEATURE_WFA_TPC_IE_IN_PROBES;
448
8ca151b5
JB		 449 mvm->rts_threshold = IEEE80211_MAX_RTS_THRESHOLD;
450
e36e5433 451 /* currently FW API supports only one optional cipher scheme */
9ddca860 452 if (mvm->fw->cs[0].cipher) {
e36e5433 453 mvm->hw->n_cipher_schemes = 1;
9ddca860 454 mvm->hw->cipher_schemes = &mvm->fw->cs[0];
e36e5433
MS		 455 }
456
8ca151b5 457#ifdef CONFIG_PM_SLEEP
d15a747f
EP		 458 if (iwl_mvm_is_d0i3_supported(mvm) &&
459 device_can_wakeup(mvm->trans->dev)) {
460 mvm->wowlan.flags = WIPHY_WOWLAN_ANY;
461 hw->wiphy->wowlan = &mvm->wowlan;
462 } else if (mvm->fw->img[IWL_UCODE_WOWLAN].sec[0].len &&
8ca151b5
JB		 463 mvm->trans->ops->d3_suspend &&
464 mvm->trans->ops->d3_resume &&
465 device_can_wakeup(mvm->trans->dev)) {
964dc9e2
JB		 466 mvm->wowlan.flags = WIPHY_WOWLAN_MAGIC_PKT |
467 WIPHY_WOWLAN_DISCONNECT |
468 WIPHY_WOWLAN_EAP_IDENTITY_REQ |
c55385f5
LC		 469 WIPHY_WOWLAN_RFKILL_RELEASE |
470 WIPHY_WOWLAN_NET_DETECT;
8ca151b5 471 if (!iwlwifi_mod_params.sw_crypto)
964dc9e2
JB		 472 mvm->wowlan.flags |= WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
473 WIPHY_WOWLAN_GTK_REKEY_FAILURE |
474 WIPHY_WOWLAN_4WAY_HANDSHAKE;
475
476 mvm->wowlan.n_patterns = IWL_WOWLAN_MAX_PATTERNS;
477 mvm->wowlan.pattern_min_len = IWL_WOWLAN_MIN_PATTERN_LEN;
478 mvm->wowlan.pattern_max_len = IWL_WOWLAN_MAX_PATTERN_LEN;
c55385f5 479 mvm->wowlan.max_nd_match_sets = IWL_SCAN_MAX_PROFILES;
964dc9e2
JB		 480 mvm->wowlan.tcp = &iwl_mvm_wowlan_tcp_support;
481 hw->wiphy->wowlan = &mvm->wowlan;
8ca151b5
JB		 482 }
483#endif
484
77736923
EP		 485#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
486 /* assign default bcast filtering configuration */
487 mvm->bcast_filters = iwl_mvm_default_bcast_filters;
488#endif
489
8ca151b5
JB		 490 ret = iwl_mvm_leds_init(mvm);
491 if (ret)
492 return ret;
493
d8f1c515
AN		 494 if (mvm->fw->ucode_capa.capa[0] & IWL_UCODE_TLV_CAPA_TDLS_SUPPORT) {
495 IWL_DEBUG_TDLS(mvm, "TDLS supported\n");
496 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS;
497 }
498
1d3c3f63
AN		 499 if (mvm->fw->ucode_capa.capa[0] &
500 IWL_UCODE_TLV_CAPA_TDLS_CHANNEL_SWITCH) {
501 IWL_DEBUG_TDLS(mvm, "TDLS channel switch supported\n");
502 hw->wiphy->features |= NL80211_FEATURE_TDLS_CHANNEL_SWITCH;
503 }
504
b7327d89
EG		 505 ret = ieee80211_register_hw(mvm->hw);
506 if (ret)
507 iwl_mvm_leds_exit(mvm);
508
509 return ret;
8ca151b5
JB		 510}
511
b2492501
AN		 512static bool iwl_mvm_defer_tx(struct iwl_mvm *mvm,
513 struct ieee80211_sta *sta,
514 struct sk_buff *skb)
515{
516 struct iwl_mvm_sta *mvmsta;
517 bool defer = false;
518
519 /*
520 * double check the IN_D0I3 flag both before and after
521 * taking the spinlock, in order to prevent taking
522 * the spinlock when not needed.
523 */
524 if (likely(!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status)))
525 return false;
526
527 spin_lock(&mvm->d0i3_tx_lock);
528 /*
529 * testing the flag again ensures the skb dequeue
530 * loop (on d0i3 exit) hasn't run yet.
531 */
532 if (!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status))
533 goto out;
534
535 mvmsta = iwl_mvm_sta_from_mac80211(sta);
536 if (mvmsta->sta_id == IWL_MVM_STATION_COUNT ||
537 mvmsta->sta_id != mvm->d0i3_ap_sta_id)
538 goto out;
539
540 __skb_queue_tail(&mvm->d0i3_tx, skb);
541 ieee80211_stop_queues(mvm->hw);
542
543 /* trigger wakeup */
544 iwl_mvm_ref(mvm, IWL_MVM_REF_TX);
545 iwl_mvm_unref(mvm, IWL_MVM_REF_TX);
546
547 defer = true;
548out:
549 spin_unlock(&mvm->d0i3_tx_lock);
550 return defer;
551}
552
8ca151b5
JB		 553static void iwl_mvm_mac_tx(struct ieee80211_hw *hw,
554 struct ieee80211_tx_control *control,
555 struct sk_buff *skb)
556{
557 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3e56eadf
JB		 558 struct ieee80211_sta *sta = control->sta;
559 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
560 struct ieee80211_hdr *hdr = (void *)skb->data;
8ca151b5 561
9ee718aa
EL		 562 if (iwl_mvm_is_radio_killed(mvm)) {
563 IWL_DEBUG_DROP(mvm, "Dropping - RF/CT KILL\n");
8ca151b5
JB		 564 goto drop;
565 }
566
398e8c6c 567 if (IEEE80211_SKB_CB(skb)->hw_queue == IWL_MVM_OFFCHANNEL_QUEUE &&
a6cc5163
MG		 568 !test_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status) &&
569 !test_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status))
8ca151b5
JB		 570 goto drop;
571
3e56eadf
JB		 572 /* treat non-bufferable MMPDUs as broadcast if sta is sleeping */
573 if (unlikely(info->flags & IEEE80211_TX_CTL_NO_PS_BUFFER &&
574 ieee80211_is_mgmt(hdr->frame_control) &&
575 !ieee80211_is_deauth(hdr->frame_control) &&
576 !ieee80211_is_disassoc(hdr->frame_control) &&
577 !ieee80211_is_action(hdr->frame_control)))
578 sta = NULL;
579
580 if (sta) {
b2492501
AN		 581 if (iwl_mvm_defer_tx(mvm, sta, skb))
582 return;
3e56eadf 583 if (iwl_mvm_tx_skb(mvm, skb, sta))
8ca151b5
JB		 584 goto drop;
585 return;
586 }
587
588 if (iwl_mvm_tx_skb_non_sta(mvm, skb))
589 goto drop;
590 return;
591 drop:
592 ieee80211_free_txskb(hw, skb);
593}
594
205e2210
EG		 595static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg)
596{
597 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
598 return false;
599 return true;
600}
601
602static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg)
603{
604 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
605 return false;
606 if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG)
607 return true;
608
609 /* enabled by default */
610 return true;
611}
612
8ca151b5
JB		 613static int iwl_mvm_mac_ampdu_action(struct ieee80211_hw *hw,
614 struct ieee80211_vif *vif,
615 enum ieee80211_ampdu_mlme_action action,
616 struct ieee80211_sta *sta, u16 tid,
617 u16 *ssn, u8 buf_size)
618{
619 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
620 int ret;
b2492501 621 bool tx_agg_ref = false;
8ca151b5
JB		 622
623 IWL_DEBUG_HT(mvm, "A-MPDU action on addr %pM tid %d: action %d\n",
624 sta->addr, tid, action);
625
626 if (!(mvm->nvm_data->sku_cap_11n_enable))
627 return -EACCES;
628
b2492501 629 /* return from D0i3 before starting a new Tx aggregation */
9256c205
EP		 630 switch (action) {
631 case IEEE80211_AMPDU_TX_START:
632 case IEEE80211_AMPDU_TX_STOP_CONT:
633 case IEEE80211_AMPDU_TX_STOP_FLUSH:
634 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
635 case IEEE80211_AMPDU_TX_OPERATIONAL:
b2492501 636 /*
9256c205
EP		 637 * for tx start, wait synchronously until D0i3 exit to
638 * get the correct sequence number for the tid.
639 * additionally, some other ampdu actions use direct
640 * target access, which is not handled automatically
641 * by the trans layer (unlike commands), so wait for
642 * d0i3 exit in these cases as well.
b2492501 643 */
d40fc489
GG		 644 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_TX_AGG);
645 if (ret)
646 return ret;
647
648 tx_agg_ref = true;
9256c205
EP		 649 break;
650 default:
651 break;
b2492501
AN		 652 }
653
8ca151b5
JB		 654 mutex_lock(&mvm->mutex);
655
656 switch (action) {
657 case IEEE80211_AMPDU_RX_START:
205e2210 658 if (!iwl_enable_rx_ampdu(mvm->cfg)) {
8ca151b5
JB		 659 ret = -EINVAL;
660 break;
661 }
662 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, *ssn, true);
663 break;
664 case IEEE80211_AMPDU_RX_STOP:
665 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, 0, false);
666 break;
667 case IEEE80211_AMPDU_TX_START:
205e2210 668 if (!iwl_enable_tx_ampdu(mvm->cfg)) {
5d158efa
EG		 669 ret = -EINVAL;
670 break;
671 }
8ca151b5
JB		 672 ret = iwl_mvm_sta_tx_agg_start(mvm, vif, sta, tid, ssn);
673 break;
674 case IEEE80211_AMPDU_TX_STOP_CONT:
e3d9e7ce
EG		 675 ret = iwl_mvm_sta_tx_agg_stop(mvm, vif, sta, tid);
676 break;
8ca151b5
JB		 677 case IEEE80211_AMPDU_TX_STOP_FLUSH:
678 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
e3d9e7ce 679 ret = iwl_mvm_sta_tx_agg_flush(mvm, vif, sta, tid);
8ca151b5
JB		 680 break;
681 case IEEE80211_AMPDU_TX_OPERATIONAL:
682 ret = iwl_mvm_sta_tx_agg_oper(mvm, vif, sta, tid, buf_size);
683 break;
684 default:
685 WARN_ON_ONCE(1);
686 ret = -EINVAL;
687 break;
688 }
689 mutex_unlock(&mvm->mutex);
690
b2492501
AN		 691 /*
692 * If the tid is marked as started, we won't use it for offloaded
693 * traffic on the next D0i3 entry. It's safe to unref.
694 */
695 if (tx_agg_ref)
696 iwl_mvm_unref(mvm, IWL_MVM_REF_TX_AGG);
697
8ca151b5
JB		 698 return ret;
699}
700
701static void iwl_mvm_cleanup_iterator(void *data, u8 *mac,
702 struct ieee80211_vif *vif)
703{
704 struct iwl_mvm *mvm = data;
705 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
706
707 mvmvif->uploaded = false;
708 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT;
709
710 /* does this make sense at all? */
711 mvmvif->color++;
712
713 spin_lock_bh(&mvm->time_event_lock);
714 iwl_mvm_te_clear_data(mvm, &mvmvif->time_event_data);
715 spin_unlock_bh(&mvm->time_event_lock);
716
fe0f2de3 717 mvmvif->phy_ctxt = NULL;
8a275bad 718 memset(&mvmvif->bf_data, 0, sizeof(mvmvif->bf_data));
8ca151b5
JB		 719}
720
aadede6e
JB		 721static ssize_t iwl_mvm_read_coredump(char *buffer, loff_t offset, size_t count,
722 const void *data, size_t datalen)
723{
724 const struct iwl_mvm_dump_ptrs *dump_ptrs = data;
725 ssize_t bytes_read;
726 ssize_t bytes_read_trans;
727
728 if (offset < dump_ptrs->op_mode_len) {
729 bytes_read = min_t(ssize_t, count,
730 dump_ptrs->op_mode_len - offset);
731 memcpy(buffer, (u8 *)dump_ptrs->op_mode_ptr + offset,
732 bytes_read);
733 offset += bytes_read;
734 count -= bytes_read;
735
736 if (count == 0)
737 return bytes_read;
738 } else {
739 bytes_read = 0;
740 }
741
742 if (!dump_ptrs->trans_ptr)
743 return bytes_read;
744
745 offset -= dump_ptrs->op_mode_len;
746 bytes_read_trans = min_t(ssize_t, count,
747 dump_ptrs->trans_ptr->len - offset);
748 memcpy(buffer + bytes_read,
749 (u8 *)dump_ptrs->trans_ptr->data + offset,
750 bytes_read_trans);
751
752 return bytes_read + bytes_read_trans;
753}
754
755static void iwl_mvm_free_coredump(const void *data)
756{
757 const struct iwl_mvm_dump_ptrs *fw_error_dump = data;
758
759 vfree(fw_error_dump->op_mode_ptr);
760 vfree(fw_error_dump->trans_ptr);
761 kfree(fw_error_dump);
762}
763
4bfa47f3 764void iwl_mvm_fw_error_dump(struct iwl_mvm *mvm)
655e6d6d
EG		 765{
766 struct iwl_fw_error_dump_file *dump_file;
767 struct iwl_fw_error_dump_data *dump_data;
768 struct iwl_fw_error_dump_info *dump_info;
48eb7b34 769 struct iwl_mvm_dump_ptrs *fw_error_dump;
655e6d6d
EG		 770 const struct fw_img *img;
771 u32 sram_len, sram_ofs;
772 u32 file_len, rxf_len;
773 unsigned long flags;
655e6d6d
EG		 774 int reg_val;
775
776 lockdep_assert_held(&mvm->mutex);
777
aadede6e 778 fw_error_dump = kzalloc(sizeof(*fw_error_dump), GFP_KERNEL);
48eb7b34
EG		 779 if (!fw_error_dump)
780 return;
781
655e6d6d
EG		 782 img = &mvm->fw->img[mvm->cur_ucode];
783 sram_ofs = img->sec[IWL_UCODE_SECTION_DATA].offset;
784 sram_len = img->sec[IWL_UCODE_SECTION_DATA].len;
785
786 /* reading buffer size */
787 reg_val = iwl_trans_read_prph(mvm->trans, RXF_SIZE_ADDR);
788 rxf_len = (reg_val & RXF_SIZE_BYTE_CNT_MSK) >> RXF_SIZE_BYTE_CND_POS;
789
790 /* the register holds the value divided by 128 */
791 rxf_len = rxf_len << 7;
792
793 file_len = sizeof(*dump_file) +
794 sizeof(*dump_data) * 3 +
795 sram_len +
796 rxf_len +
797 sizeof(*dump_info);
798
5bfe6f53 799 dump_file = vzalloc(file_len);
48eb7b34
EG		 800 if (!dump_file) {
801 kfree(fw_error_dump);
655e6d6d 802 return;
48eb7b34 803 }
655e6d6d 804
48eb7b34 805 fw_error_dump->op_mode_ptr = dump_file;
655e6d6d
EG		 806
807 dump_file->barker = cpu_to_le32(IWL_FW_ERROR_DUMP_BARKER);
655e6d6d
EG		 808 dump_data = (void *)dump_file->data;
809
810 dump_data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_DEV_FW_INFO);
811 dump_data->len = cpu_to_le32(sizeof(*dump_info));
812 dump_info = (void *) dump_data->data;
813 dump_info->device_family =
814 mvm->cfg->device_family == IWL_DEVICE_FAMILY_7000 ?
815 cpu_to_le32(IWL_FW_ERROR_DUMP_FAMILY_7) :
816 cpu_to_le32(IWL_FW_ERROR_DUMP_FAMILY_8);
817 memcpy(dump_info->fw_human_readable, mvm->fw->human_readable,
818 sizeof(dump_info->fw_human_readable));
819 strncpy(dump_info->dev_human_readable, mvm->cfg->name,
820 sizeof(dump_info->dev_human_readable));
821 strncpy(dump_info->bus_human_readable, mvm->dev->bus->name,
822 sizeof(dump_info->bus_human_readable));
823
824 dump_data = iwl_fw_error_next_data(dump_data);
825 dump_data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_RXF);
826 dump_data->len = cpu_to_le32(rxf_len);
827
828 if (iwl_trans_grab_nic_access(mvm->trans, false, &flags)) {
829 u32 *rxf = (void *)dump_data->data;
830 int i;
831
832 for (i = 0; i < (rxf_len / sizeof(u32)); i++) {
833 iwl_trans_write_prph(mvm->trans,
834 RXF_LD_FENCE_OFFSET_ADDR,
835 i * sizeof(u32));
836 rxf[i] = iwl_trans_read_prph(mvm->trans,
837 RXF_FIFO_RD_FENCE_ADDR);
838 }
839 iwl_trans_release_nic_access(mvm->trans, &flags);
840 }
841
842 dump_data = iwl_fw_error_next_data(dump_data);
843 dump_data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_SRAM);
844 dump_data->len = cpu_to_le32(sram_len);
845 iwl_trans_read_mem_bytes(mvm->trans, sram_ofs, dump_data->data,
846 sram_len);
847
48eb7b34
EG		 848 fw_error_dump->trans_ptr = iwl_trans_dump_data(mvm->trans);
849 fw_error_dump->op_mode_len = file_len;
850 if (fw_error_dump->trans_ptr)
851 file_len += fw_error_dump->trans_ptr->len;
852 dump_file->file_len = cpu_to_le32(file_len);
4bfa47f3 853
aadede6e
JB		 854 dev_coredumpm(mvm->trans->dev, THIS_MODULE, fw_error_dump, 0,
855 GFP_KERNEL, iwl_mvm_read_coredump, iwl_mvm_free_coredump);
655e6d6d 856}
655e6d6d 857
8ca151b5
JB		 858static void iwl_mvm_restart_cleanup(struct iwl_mvm *mvm)
859{
58629d9d
JB		 860 /* clear the D3 reconfig, we only need it to avoid dumping a
861 * firmware coredump on reconfiguration, we shouldn't do that
862 * on D3->D0 transition
863 */
864 if (!test_and_clear_bit(IWL_MVM_STATUS_D3_RECONFIG, &mvm->status))
865 iwl_mvm_fw_error_dump(mvm);
1bd3cbc1 866
8ca151b5 867 iwl_trans_stop_device(mvm->trans);
8ca151b5
JB		 868
869 mvm->scan_status = IWL_MVM_SCAN_NONE;
b1873300 870 mvm->ps_disabled = false;
31b8b343 871 mvm->calibrating = false;
8ca151b5
JB		 872
873 /* just in case one was running */
874 ieee80211_remain_on_channel_expired(mvm->hw);
875
876 ieee80211_iterate_active_interfaces_atomic(
877 mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
878 iwl_mvm_cleanup_iterator, mvm);
879
fe0f2de3 880 mvm->p2p_device_vif = NULL;
37577fe2 881 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT;
fe0f2de3
IP		 882
883 iwl_mvm_reset_phy_ctxts(mvm);
8ca151b5
JB		 884 memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table));
885 memset(mvm->sta_drained, 0, sizeof(mvm->sta_drained));
a0f6bf2a 886 memset(mvm->tfd_drained, 0, sizeof(mvm->tfd_drained));
8a275bad
EG		 887 memset(&mvm->last_bt_notif, 0, sizeof(mvm->last_bt_notif));
888 memset(&mvm->last_bt_notif_old, 0, sizeof(mvm->last_bt_notif_old));
889 memset(&mvm->last_bt_ci_cmd, 0, sizeof(mvm->last_bt_ci_cmd));
890 memset(&mvm->last_bt_ci_cmd_old, 0, sizeof(mvm->last_bt_ci_cmd_old));
891 memset(&mvm->bt_ack_kill_msk, 0, sizeof(mvm->bt_ack_kill_msk));
892 memset(&mvm->bt_cts_kill_msk, 0, sizeof(mvm->bt_cts_kill_msk));
8ca151b5
JB		 893
894 ieee80211_wake_queues(mvm->hw);
895
7498cf4c
EP		 896 /* cleanup all stale references (scan, roc), but keep the
897 * ucode_down ref until reconfig is complete */
898 iwl_mvm_unref_all_except(mvm, IWL_MVM_REF_UCODE_DOWN);
899
228670b2
EP		 900 /* clear any stale d0i3 state */
901 clear_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status);
902
8ca151b5 903 mvm->vif_count = 0;
113a0447 904 mvm->rx_ba_sessions = 0;
8ca151b5
JB		 905}
906
a0a09243 907int __iwl_mvm_mac_start(struct iwl_mvm *mvm)
8ca151b5 908{
8ca151b5
JB		 909 int ret;
910
a0a09243 911 lockdep_assert_held(&mvm->mutex);
8ca151b5
JB		 912
913 /* Clean up some internal and mac80211 state on restart */
914 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
915 iwl_mvm_restart_cleanup(mvm);
916
917 ret = iwl_mvm_up(mvm);
c47af22a
JB		 918
919 if (ret && test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
920 /* Something went wrong - we need to finish some cleanup
921 * that normally iwl_mvm_mac_restart_complete() below
922 * would do.
923 */
924 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
925 iwl_mvm_d0i3_enable_tx(mvm, NULL);
926 }
927
a0a09243
LC		 928 return ret;
929}
930
931static int iwl_mvm_mac_start(struct ieee80211_hw *hw)
932{
933 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
934 int ret;
935
936 mutex_lock(&mvm->mutex);
937 ret = __iwl_mvm_mac_start(mvm);
8ca151b5
JB		 938 mutex_unlock(&mvm->mutex);
939
940 return ret;
941}
942
cf2c92d8 943static void iwl_mvm_restart_complete(struct iwl_mvm *mvm)
8ca151b5 944{
8ca151b5
JB		 945 int ret;
946
947 mutex_lock(&mvm->mutex);
948
949 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
b2492501 950 iwl_mvm_d0i3_enable_tx(mvm, NULL);
0166230c 951 ret = iwl_mvm_update_quotas(mvm, NULL);
8ca151b5
JB		 952 if (ret)
953 IWL_ERR(mvm, "Failed to update quotas after restart (%d)\n",
954 ret);
955
7498cf4c
EP		 956 /* allow transport/FW low power modes */
957 iwl_mvm_unref(mvm, IWL_MVM_REF_UCODE_DOWN);
958
cbd2ae2d
AN		 959 /*
960 * If we have TDLS peers, remove them. We don't know the last seqno/PN
961 * of packets the FW sent out, so we must reconnect.
962 */
963 iwl_mvm_teardown_tdls_peers(mvm);
964
8ca151b5
JB		 965 mutex_unlock(&mvm->mutex);
966}
967
088070a2
EP		 968static void iwl_mvm_resume_complete(struct iwl_mvm *mvm)
969{
970 bool exit_now;
971
972 if (!iwl_mvm_is_d0i3_supported(mvm))
973 return;
974
975 mutex_lock(&mvm->d0i3_suspend_mutex);
976 __clear_bit(D0I3_DEFER_WAKEUP, &mvm->d0i3_suspend_flags);
977 exit_now = __test_and_clear_bit(D0I3_PENDING_WAKEUP,
978 &mvm->d0i3_suspend_flags);
979 mutex_unlock(&mvm->d0i3_suspend_mutex);
980
981 if (exit_now) {
982 IWL_DEBUG_RPM(mvm, "Run deferred d0i3 exit\n");
983 _iwl_mvm_exit_d0i3(mvm);
984 }
985}
986
cf2c92d8
EP		 987static void
988iwl_mvm_mac_reconfig_complete(struct ieee80211_hw *hw,
989 enum ieee80211_reconfig_type reconfig_type)
990{
991 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
992
993 switch (reconfig_type) {
994 case IEEE80211_RECONFIG_TYPE_RESTART:
995 iwl_mvm_restart_complete(mvm);
996 break;
997 case IEEE80211_RECONFIG_TYPE_SUSPEND:
088070a2 998 iwl_mvm_resume_complete(mvm);
cf2c92d8
EP		 999 break;
1000 }
1001}
1002
a0a09243 1003void __iwl_mvm_mac_stop(struct iwl_mvm *mvm)
8ca151b5 1004{
a0a09243 1005 lockdep_assert_held(&mvm->mutex);
7498cf4c 1006
0a79a0c0
EP		 1007 /*
1008 * Disallow low power states when the FW is down by taking
1009 * the UCODE_DOWN ref. in case of ongoing hw restart the
1010 * ref is already taken, so don't take it again.
1011 */
1012 if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
1013 iwl_mvm_ref(mvm, IWL_MVM_REF_UCODE_DOWN);
7498cf4c 1014
8ca151b5
JB		 1015 /* async_handlers_wk is now blocked */
1016
1017 /*
1018 * The work item could be running or queued if the
1019 * ROC time event stops just as we get here.
1020 */
1021 cancel_work_sync(&mvm->roc_done_wk);
1022
1023 iwl_trans_stop_device(mvm->trans);
8ca151b5
JB		 1024
1025 iwl_mvm_async_handlers_purge(mvm);
1026 /* async_handlers_list is empty and will stay empty: HW is stopped */
1027
1028 /* the fw is stopped, the aux sta is dead: clean up driver state */
712b24ad 1029 iwl_mvm_del_aux_sta(mvm);
8ca151b5 1030
0a79a0c0
EP		 1031 /*
1032 * Clear IN_HW_RESTART flag when stopping the hw (as restart_complete()
1033 * won't be called in this case).
1034 */
1035 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
1036
bc44886d 1037 mvm->ucode_loaded = false;
a0a09243 1038}
bc44886d 1039
a0a09243
LC		 1040static void iwl_mvm_mac_stop(struct ieee80211_hw *hw)
1041{
1042 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1043
1044 flush_work(&mvm->d0i3_exit_work);
1045 flush_work(&mvm->async_handlers_wk);
4bfa47f3 1046 flush_work(&mvm->fw_error_dump_wk);
a0a09243
LC		 1047
1048 mutex_lock(&mvm->mutex);
1049 __iwl_mvm_mac_stop(mvm);
8ca151b5
JB		 1050 mutex_unlock(&mvm->mutex);
1051
1052 /*
1053 * The worker might have been waiting for the mutex, let it run and
1054 * discover that its list is now empty.
1055 */
1056 cancel_work_sync(&mvm->async_handlers_wk);
1057}
1058
fe0f2de3
IP		 1059static struct iwl_mvm_phy_ctxt *iwl_mvm_get_free_phy_ctxt(struct iwl_mvm *mvm)
1060{
1061 u16 i;
1062
1063 lockdep_assert_held(&mvm->mutex);
1064
1065 for (i = 0; i < NUM_PHY_CTX; i++)
1066 if (!mvm->phy_ctxts[i].ref)
1067 return &mvm->phy_ctxts[i];
1068
1069 IWL_ERR(mvm, "No available PHY context\n");
1070 return NULL;
1071}
1072
ee9c6cb0
EG		 1073static int iwl_mvm_set_tx_power(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1074 s8 tx_power)
1075{
1076 /* FW is in charge of regulatory enforcement */
1077 struct iwl_reduce_tx_power_cmd reduce_txpwr_cmd = {
1078 .mac_context_id = iwl_mvm_vif_from_mac80211(vif)->id,
1079 .pwr_restriction = cpu_to_le16(tx_power),
1080 };
1081
a1022927 1082 return iwl_mvm_send_cmd_pdu(mvm, REDUCE_TX_POWER_CMD, 0,
ee9c6cb0
EG		 1083 sizeof(reduce_txpwr_cmd),
1084 &reduce_txpwr_cmd);
1085}
1086
8ca151b5
JB		 1087static int iwl_mvm_mac_add_interface(struct ieee80211_hw *hw,
1088 struct ieee80211_vif *vif)
1089{
1090 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1091 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1092 int ret;
1093
d40fc489
GG		 1094 /*
1095 * make sure D0i3 exit is completed, otherwise a target access
1096 * during tx queue configuration could be done when still in
1097 * D0i3 state.
1098 */
1099 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_ADD_IF);
1100 if (ret)
1101 return ret;
1102
8ca151b5
JB		 1103 /*
1104 * Not much to do here. The stack will not allow interface
1105 * types or combinations that we didn't advertise, so we
1106 * don't really have to check the types.
1107 */
1108
1109 mutex_lock(&mvm->mutex);
1110
e89044d7 1111 /* Allocate resources for the MAC context, and add it to the fw */
8ca151b5
JB		 1112 ret = iwl_mvm_mac_ctxt_init(mvm, vif);
1113 if (ret)
1114 goto out_unlock;
1115
1c2abf72 1116 /* Counting number of interfaces is needed for legacy PM */
ea183d02
IP		 1117 if (vif->type != NL80211_IFTYPE_P2P_DEVICE)
1118 mvm->vif_count++;
ea183d02 1119
8ca151b5
JB		 1120 /*
1121 * The AP binding flow can be done only after the beacon
1122 * template is configured (which happens only in the mac80211
1123 * start_ap() flow), and adding the broadcast station can happen
1124 * only after the binding.
1125 * In addition, since modifying the MAC before adding a bcast
1126 * station is not allowed by the FW, delay the adding of MAC context to
1127 * the point where we can also add the bcast station.
1128 * In short: there's not much we can do at this point, other than
1129 * allocating resources :)
1130 */
5023d966
JB		 1131 if (vif->type == NL80211_IFTYPE_AP ||
1132 vif->type == NL80211_IFTYPE_ADHOC) {
013290aa 1133 ret = iwl_mvm_alloc_bcast_sta(mvm, vif);
8ca151b5
JB		 1134 if (ret) {
1135 IWL_ERR(mvm, "Failed to allocate bcast sta\n");
1136 goto out_release;
1137 }
1138
77740cb4 1139 iwl_mvm_vif_dbgfs_register(mvm, vif);
8ca151b5
JB		 1140 goto out_unlock;
1141 }
1142
8ca151b5
JB		 1143 ret = iwl_mvm_mac_ctxt_add(mvm, vif);
1144 if (ret)
1145 goto out_release;
1146
999609f1 1147 ret = iwl_mvm_power_update_mac(mvm);
e5e7aa8e
EG		 1148 if (ret)
1149 goto out_release;
8ca151b5 1150
7df15b1e 1151 /* beacon filtering */
a1022927 1152 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
bd3351ba
EP		 1153 if (ret)
1154 goto out_remove_mac;
1155
7df15b1e 1156 if (!mvm->bf_allowed_vif &&
73e5f2c5 1157 vif->type == NL80211_IFTYPE_STATION && !vif->p2p) {
7df15b1e 1158 mvm->bf_allowed_vif = mvmvif;
a20fd398
AO		 1159 vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER |
1160 IEEE80211_VIF_SUPPORTS_CQM_RSSI;
7df15b1e
HG		 1161 }
1162
8ca151b5
JB		 1163 /*
1164 * P2P_DEVICE interface does not have a channel context assigned to it,
1165 * so a dedicated PHY context is allocated to it and the corresponding
1166 * MAC context is bound to it at this stage.
1167 */
1168 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
8ca151b5 1169
fe0f2de3
IP		 1170 mvmvif->phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
1171 if (!mvmvif->phy_ctxt) {
1172 ret = -ENOSPC;
bd3351ba 1173 goto out_free_bf;
fe0f2de3 1174 }
8ca151b5 1175
53a9d61e 1176 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
8ca151b5
JB		 1177 ret = iwl_mvm_binding_add_vif(mvm, vif);
1178 if (ret)
53a9d61e 1179 goto out_unref_phy;
8ca151b5 1180
013290aa 1181 ret = iwl_mvm_add_bcast_sta(mvm, vif);
8ca151b5
JB		 1182 if (ret)
1183 goto out_unbind;
1184
1185 /* Save a pointer to p2p device vif, so it can later be used to
1186 * update the p2p device MAC when a GO is started/stopped */
1187 mvm->p2p_device_vif = vif;
1188 }
1189
63494374 1190 iwl_mvm_vif_dbgfs_register(mvm, vif);
8ca151b5
JB		 1191 goto out_unlock;
1192
1193 out_unbind:
1194 iwl_mvm_binding_remove_vif(mvm, vif);
53a9d61e 1195 out_unref_phy:
fe0f2de3 1196 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
bd3351ba
EP		 1197 out_free_bf:
1198 if (mvm->bf_allowed_vif == mvmvif) {
1199 mvm->bf_allowed_vif = NULL;
a20fd398
AO		 1200 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER |
1201 IEEE80211_VIF_SUPPORTS_CQM_RSSI);
bd3351ba 1202 }
8ca151b5
JB		 1203 out_remove_mac:
1204 mvmvif->phy_ctxt = NULL;
1205 iwl_mvm_mac_ctxt_remove(mvm, vif);
1206 out_release:
5ee2b215
AB		 1207 if (vif->type != NL80211_IFTYPE_P2P_DEVICE)
1208 mvm->vif_count--;
1c2abf72 1209
8ca151b5
JB		 1210 iwl_mvm_mac_ctxt_release(mvm, vif);
1211 out_unlock:
1212 mutex_unlock(&mvm->mutex);
1213
d40fc489
GG		 1214 iwl_mvm_unref(mvm, IWL_MVM_REF_ADD_IF);
1215
8ca151b5
JB		 1216 return ret;
1217}
1218
38a12b5b
JB		 1219static void iwl_mvm_prepare_mac_removal(struct iwl_mvm *mvm,
1220 struct ieee80211_vif *vif)
8ca151b5 1221{
d92b732e 1222 u32 tfd_msk = iwl_mvm_mac_get_queues_mask(vif);
8ca151b5
JB		 1223
1224 if (tfd_msk) {
1225 mutex_lock(&mvm->mutex);
1226 iwl_mvm_flush_tx_path(mvm, tfd_msk, true);
1227 mutex_unlock(&mvm->mutex);
1228 }
1229
1230 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1231 /*
1232 * Flush the ROC worker which will flush the OFFCHANNEL queue.
1233 * We assume here that all the packets sent to the OFFCHANNEL
1234 * queue are sent in ROC session.
1235 */
1236 flush_work(&mvm->roc_done_wk);
1237 } else {
1238 /*
1239 * By now, all the AC queues are empty. The AGG queues are
1240 * empty too. We already got all the Tx responses for all the
1241 * packets in the queues. The drain work can have been
0742a75a 1242 * triggered. Flush it.
8ca151b5
JB		 1243 */
1244 flush_work(&mvm->sta_drained_wk);
1245 }
38a12b5b
JB		 1246}
1247
1248static void iwl_mvm_mac_remove_interface(struct ieee80211_hw *hw,
1249 struct ieee80211_vif *vif)
1250{
1251 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1252 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1253
1254 iwl_mvm_prepare_mac_removal(mvm, vif);
8ca151b5
JB		 1255
1256 mutex_lock(&mvm->mutex);
1257
7df15b1e
HG		 1258 if (mvm->bf_allowed_vif == mvmvif) {
1259 mvm->bf_allowed_vif = NULL;
a20fd398
AO		 1260 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER |
1261 IEEE80211_VIF_SUPPORTS_CQM_RSSI);
7df15b1e
HG		 1262 }
1263
63494374
JB		 1264 iwl_mvm_vif_dbgfs_clean(mvm, vif);
1265
8ca151b5
JB		 1266 /*
1267 * For AP/GO interface, the tear down of the resources allocated to the
38a12b5b 1268 * interface is be handled as part of the stop_ap flow.
8ca151b5 1269 */
5023d966
JB		 1270 if (vif->type == NL80211_IFTYPE_AP ||
1271 vif->type == NL80211_IFTYPE_ADHOC) {
507cadf2
DS		 1272#ifdef CONFIG_NL80211_TESTMODE
1273 if (vif == mvm->noa_vif) {
1274 mvm->noa_vif = NULL;
1275 mvm->noa_duration = 0;
1276 }
1277#endif
013290aa 1278 iwl_mvm_dealloc_bcast_sta(mvm, vif);
8ca151b5
JB		 1279 goto out_release;
1280 }
1281
1282 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1283 mvm->p2p_device_vif = NULL;
013290aa 1284 iwl_mvm_rm_bcast_sta(mvm, vif);
8ca151b5 1285 iwl_mvm_binding_remove_vif(mvm, vif);
fe0f2de3 1286 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
8ca151b5
JB		 1287 mvmvif->phy_ctxt = NULL;
1288 }
1289
5ee2b215 1290 if (mvm->vif_count && vif->type != NL80211_IFTYPE_P2P_DEVICE)
8ca151b5 1291 mvm->vif_count--;
1c2abf72 1292
999609f1 1293 iwl_mvm_power_update_mac(mvm);
8ca151b5
JB		 1294 iwl_mvm_mac_ctxt_remove(mvm, vif);
1295
1296out_release:
1297 iwl_mvm_mac_ctxt_release(mvm, vif);
1298 mutex_unlock(&mvm->mutex);
1299}
1300
1301static int iwl_mvm_mac_config(struct ieee80211_hw *hw, u32 changed)
88f2fd73 1302{
8ca151b5
JB		 1303 return 0;
1304}
1305
e59647ea
EP		 1306struct iwl_mvm_mc_iter_data {
1307 struct iwl_mvm *mvm;
1308 int port_id;
1309};
1310
1311static void iwl_mvm_mc_iface_iterator(void *_data, u8 *mac,
1312 struct ieee80211_vif *vif)
1313{
1314 struct iwl_mvm_mc_iter_data *data = _data;
1315 struct iwl_mvm *mvm = data->mvm;
1316 struct iwl_mcast_filter_cmd *cmd = mvm->mcast_filter_cmd;
1317 int ret, len;
1318
1319 /* if we don't have free ports, mcast frames will be dropped */
1320 if (WARN_ON_ONCE(data->port_id >= MAX_PORT_ID_NUM))
1321 return;
1322
1323 if (vif->type != NL80211_IFTYPE_STATION ||
1324 !vif->bss_conf.assoc)
1325 return;
1326
1327 cmd->port_id = data->port_id++;
1328 memcpy(cmd->bssid, vif->bss_conf.bssid, ETH_ALEN);
1329 len = roundup(sizeof(*cmd) + cmd->count * ETH_ALEN, 4);
1330
1c4abec0 1331 ret = iwl_mvm_send_cmd_pdu(mvm, MCAST_FILTER_CMD, CMD_ASYNC, len, cmd);
e59647ea
EP		 1332 if (ret)
1333 IWL_ERR(mvm, "mcast filter cmd error. ret=%d\n", ret);
1334}
1335
1336static void iwl_mvm_recalc_multicast(struct iwl_mvm *mvm)
1337{
1338 struct iwl_mvm_mc_iter_data iter_data = {
1339 .mvm = mvm,
88f2fd73
MG		 1340 };
1341
e59647ea
EP		 1342 lockdep_assert_held(&mvm->mutex);
1343
1344 if (WARN_ON_ONCE(!mvm->mcast_filter_cmd))
1345 return;
1346
1c4abec0 1347 ieee80211_iterate_active_interfaces_atomic(
e59647ea
EP		 1348 mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1349 iwl_mvm_mc_iface_iterator, &iter_data);
88f2fd73
MG		 1350}
1351
e59647ea
EP		 1352static u64 iwl_mvm_prepare_multicast(struct ieee80211_hw *hw,
1353 struct netdev_hw_addr_list *mc_list)
8ca151b5 1354{
e59647ea
EP		 1355 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1356 struct iwl_mcast_filter_cmd *cmd;
1357 struct netdev_hw_addr *addr;
f3bd58f4
MS		 1358 int addr_count;
1359 bool pass_all;
e59647ea
EP		 1360 int len;
1361
f3bd58f4
MS		 1362 addr_count = netdev_hw_addr_list_count(mc_list);
1363 pass_all = addr_count > MAX_MCAST_FILTERING_ADDRESSES ||
1364 IWL_MVM_FW_MCAST_FILTER_PASS_ALL;
1365 if (pass_all)
e59647ea 1366 addr_count = 0;
e59647ea
EP		 1367
1368 len = roundup(sizeof(*cmd) + addr_count * ETH_ALEN, 4);
1369 cmd = kzalloc(len, GFP_ATOMIC);
1370 if (!cmd)
1371 return 0;
1372
1373 if (pass_all) {
1374 cmd->pass_all = 1;
1375 return (u64)(unsigned long)cmd;
1376 }
1377
1378 netdev_hw_addr_list_for_each(addr, mc_list) {
1379 IWL_DEBUG_MAC80211(mvm, "mcast addr (%d): %pM\n",
1380 cmd->count, addr->addr);
1381 memcpy(&cmd->addr_list[cmd->count * ETH_ALEN],
1382 addr->addr, ETH_ALEN);
1383 cmd->count++;
1384 }
1385
1386 return (u64)(unsigned long)cmd;
8ca151b5
JB		 1387}
1388
1389static void iwl_mvm_configure_filter(struct ieee80211_hw *hw,
1390 unsigned int changed_flags,
1391 unsigned int *total_flags,
1392 u64 multicast)
1393{
e59647ea
EP		 1394 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1395 struct iwl_mcast_filter_cmd *cmd = (void *)(unsigned long)multicast;
8ca151b5 1396
e59647ea 1397 mutex_lock(&mvm->mutex);
51b6b9e0 1398
e59647ea
EP		 1399 /* replace previous configuration */
1400 kfree(mvm->mcast_filter_cmd);
1401 mvm->mcast_filter_cmd = cmd;
51b6b9e0 1402
e59647ea
EP		 1403 if (!cmd)
1404 goto out;
51b6b9e0 1405
e59647ea
EP		 1406 iwl_mvm_recalc_multicast(mvm);
1407out:
1408 mutex_unlock(&mvm->mutex);
1409 *total_flags = 0;
51b6b9e0
EG		 1410}
1411
c87163b9
EP		 1412#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
1413struct iwl_bcast_iter_data {
1414 struct iwl_mvm *mvm;
1415 struct iwl_bcast_filter_cmd *cmd;
1416 u8 current_filter;
1417};
1418
1419static void
1420iwl_mvm_set_bcast_filter(struct ieee80211_vif *vif,
1421 const struct iwl_fw_bcast_filter *in_filter,
1422 struct iwl_fw_bcast_filter *out_filter)
1423{
1424 struct iwl_fw_bcast_filter_attr *attr;
1425 int i;
1426
1427 memcpy(out_filter, in_filter, sizeof(*out_filter));
1428
1429 for (i = 0; i < ARRAY_SIZE(out_filter->attrs); i++) {
1430 attr = &out_filter->attrs[i];
1431
1432 if (!attr->mask)
1433 break;
1434
2ee8f021
EP		 1435 switch (attr->reserved1) {
1436 case cpu_to_le16(BC_FILTER_MAGIC_IP):
1437 if (vif->bss_conf.arp_addr_cnt != 1) {
1438 attr->mask = 0;
1439 continue;
1440 }
1441
1442 attr->val = vif->bss_conf.arp_addr_list[0];
1443 break;
1444 case cpu_to_le16(BC_FILTER_MAGIC_MAC):
1445 attr->val = *(__be32 *)&vif->addr[2];
1446 break;
1447 default:
1448 break;
1449 }
1450 attr->reserved1 = 0;
c87163b9
EP		 1451 out_filter->num_attrs++;
1452 }
1453}
1454
1455static void iwl_mvm_bcast_filter_iterator(void *_data, u8 *mac,
1456 struct ieee80211_vif *vif)
1457{
1458 struct iwl_bcast_iter_data *data = _data;
1459 struct iwl_mvm *mvm = data->mvm;
1460 struct iwl_bcast_filter_cmd *cmd = data->cmd;
1461 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1462 struct iwl_fw_bcast_mac *bcast_mac;
1463 int i;
1464
1465 if (WARN_ON(mvmvif->id >= ARRAY_SIZE(cmd->macs)))
1466 return;
1467
1468 bcast_mac = &cmd->macs[mvmvif->id];
1469
e48393e8
IP		 1470 /*
1471 * enable filtering only for associated stations, but not for P2P
1472 * Clients
1473 */
1474 if (vif->type != NL80211_IFTYPE_STATION || vif->p2p ||
1475 !vif->bss_conf.assoc)
c87163b9
EP		 1476 return;
1477
1478 bcast_mac->default_discard = 1;
1479
1480 /* copy all configured filters */
1481 for (i = 0; mvm->bcast_filters[i].attrs[0].mask; i++) {
1482 /*
1483 * Make sure we don't exceed our filters limit.
1484 * if there is still a valid filter to be configured,
1485 * be on the safe side and just allow bcast for this mac.
1486 */
1487 if (WARN_ON_ONCE(data->current_filter >=
1488 ARRAY_SIZE(cmd->filters))) {
1489 bcast_mac->default_discard = 0;
1490 bcast_mac->attached_filters = 0;
1491 break;
1492 }
1493
1494 iwl_mvm_set_bcast_filter(vif,
1495 &mvm->bcast_filters[i],
1496 &cmd->filters[data->current_filter]);
1497
1498 /* skip current filter if it contains no attributes */
1499 if (!cmd->filters[data->current_filter].num_attrs)
1500 continue;
1501
1502 /* attach the filter to current mac */
1503 bcast_mac->attached_filters |=
1504 cpu_to_le16(BIT(data->current_filter));
1505
1506 data->current_filter++;
1507 }
1508}
1509
de06a59e
EP		 1510bool iwl_mvm_bcast_filter_build_cmd(struct iwl_mvm *mvm,
1511 struct iwl_bcast_filter_cmd *cmd)
c87163b9 1512{
c87163b9
EP		 1513 struct iwl_bcast_iter_data iter_data = {
1514 .mvm = mvm,
de06a59e 1515 .cmd = cmd,
c87163b9
EP		 1516 };
1517
3b8983b1
MS		 1518 if (IWL_MVM_FW_BCAST_FILTER_PASS_ALL)
1519 return false;
1520
de06a59e
EP		 1521 memset(cmd, 0, sizeof(*cmd));
1522 cmd->max_bcast_filters = ARRAY_SIZE(cmd->filters);
1523 cmd->max_macs = ARRAY_SIZE(cmd->macs);
1524
1525#ifdef CONFIG_IWLWIFI_DEBUGFS
1526 /* use debugfs filters/macs if override is configured */
1527 if (mvm->dbgfs_bcast_filtering.override) {
1528 memcpy(cmd->filters, &mvm->dbgfs_bcast_filtering.cmd.filters,
1529 sizeof(cmd->filters));
1530 memcpy(cmd->macs, &mvm->dbgfs_bcast_filtering.cmd.macs,
1531 sizeof(cmd->macs));
1532 return true;
1533 }
1534#endif
c87163b9
EP		 1535
1536 /* if no filters are configured, do nothing */
1537 if (!mvm->bcast_filters)
de06a59e 1538 return false;
c87163b9
EP		 1539
1540 /* configure and attach these filters for each associated sta vif */
1541 ieee80211_iterate_active_interfaces(
1542 mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1543 iwl_mvm_bcast_filter_iterator, &iter_data);
1544
de06a59e
EP		 1545 return true;
1546}
1547static int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm,
1548 struct ieee80211_vif *vif)
1549{
1550 struct iwl_bcast_filter_cmd cmd;
1551
1552 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_BCAST_FILTERING))
1553 return 0;
1554
1555 if (!iwl_mvm_bcast_filter_build_cmd(mvm, &cmd))
1556 return 0;
1557
a1022927 1558 return iwl_mvm_send_cmd_pdu(mvm, BCAST_FILTER_CMD, 0,
c87163b9
EP		 1559 sizeof(cmd), &cmd);
1560}
1561#else
1562static inline int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm,
1563 struct ieee80211_vif *vif)
1564{
1565 return 0;
1566}
1567#endif
1568
8ca151b5
JB		 1569static void iwl_mvm_bss_info_changed_station(struct iwl_mvm *mvm,
1570 struct ieee80211_vif *vif,
1571 struct ieee80211_bss_conf *bss_conf,
1572 u32 changes)
1573{
1574 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1575 int ret;
1576
6e97b0d2
IP		 1577 /*
1578 * Re-calculate the tsf id, as the master-slave relations depend on the
1579 * beacon interval, which was not known when the station interface was
1580 * added.
1581 */
1582 if (changes & BSS_CHANGED_ASSOC && bss_conf->assoc)
1583 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif);
1584
3dfd3a97
JB		 1585 /*
1586 * If we're not associated yet, take the (new) BSSID before associating
1587 * so the firmware knows. If we're already associated, then use the old
1588 * BSSID here, and we'll send a cleared one later in the CHANGED_ASSOC
1589 * branch for disassociation below.
1590 */
1591 if (changes & BSS_CHANGED_BSSID && !mvmvif->associated)
1592 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN);
1593
1594 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, mvmvif->bssid);
8ca151b5
JB		 1595 if (ret)
1596 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr);
1597
3dfd3a97
JB		 1598 /* after sending it once, adopt mac80211 data */
1599 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN);
1600 mvmvif->associated = bss_conf->assoc;
1601
8ca151b5
JB		 1602 if (changes & BSS_CHANGED_ASSOC) {
1603 if (bss_conf->assoc) {
1604 /* add quota for this interface */
0166230c 1605 ret = iwl_mvm_update_quotas(mvm, NULL);
8ca151b5
JB		 1606 if (ret) {
1607 IWL_ERR(mvm, "failed to update quotas\n");
1608 return;
1609 }
016d27e1
JB		 1610
1611 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART,
1612 &mvm->status)) {
1613 /*
1614 * If we're restarting then the firmware will
1615 * obviously have lost synchronisation with
1616 * the AP. It will attempt to synchronise by
1617 * itself, but we can make it more reliable by
1618 * scheduling a session protection time event.
1619 *
1620 * The firmware needs to receive a beacon to
1621 * catch up with synchronisation, use 110% of
1622 * the beacon interval.
1623 *
1624 * Set a large maximum delay to allow for more
1625 * than a single interface.
1626 */
1627 u32 dur = (11 * vif->bss_conf.beacon_int) / 10;
1628 iwl_mvm_protect_session(mvm, vif, dur, dur,
d20d37bc 1629 5 * dur, false);
016d27e1 1630 }
1f3b0ff8
LE		 1631
1632 iwl_mvm_sf_update(mvm, vif, false);
175a70b7 1633 iwl_mvm_power_vif_assoc(mvm, vif);
697162a1 1634 if (vif->p2p) {
29a90a49 1635 iwl_mvm_ref(mvm, IWL_MVM_REF_P2P_CLIENT);
697162a1
EG		 1636 iwl_mvm_update_smps(mvm, vif,
1637 IWL_MVM_SMPS_REQ_PROT,
1638 IEEE80211_SMPS_DYNAMIC);
1639 }
8ca151b5 1640 } else if (mvmvif->ap_sta_id != IWL_MVM_STATION_COUNT) {
1f3b0ff8
LE		 1641 /*
1642 * If update fails - SF might be running in associated
1643 * mode while disassociated - which is forbidden.
1644 */
1645 WARN_ONCE(iwl_mvm_sf_update(mvm, vif, false),
1646 "Failed to update SF upon disassociation\n");
1647
8ca151b5
JB		 1648 /* remove AP station now that the MAC is unassoc */
1649 ret = iwl_mvm_rm_sta_id(mvm, vif, mvmvif->ap_sta_id);
1650 if (ret)
1651 IWL_ERR(mvm, "failed to remove AP station\n");
37577fe2
EP		 1652
1653 if (mvm->d0i3_ap_sta_id == mvmvif->ap_sta_id)
1654 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT;
8ca151b5
JB		 1655 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT;
1656 /* remove quota for this interface */
0166230c 1657 ret = iwl_mvm_update_quotas(mvm, NULL);
8ca151b5
JB		 1658 if (ret)
1659 IWL_ERR(mvm, "failed to update quotas\n");
29a90a49
EP		 1660
1661 if (vif->p2p)
1662 iwl_mvm_unref(mvm, IWL_MVM_REF_P2P_CLIENT);
3dfd3a97
JB		 1663
1664 /* this will take the cleared BSSID from bss_conf */
1665 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
1666 if (ret)
1667 IWL_ERR(mvm,
1668 "failed to update MAC %pM (clear after unassoc)\n",
1669 vif->addr);
8ca151b5 1670 }
a20fd398 1671
e59647ea 1672 iwl_mvm_recalc_multicast(mvm);
c87163b9 1673 iwl_mvm_configure_bcast_filter(mvm, vif);
e59647ea 1674
a20fd398
AO		 1675 /* reset rssi values */
1676 mvmvif->bf_data.ave_beacon_signal = 0;
1677
8e484f0b 1678 iwl_mvm_bt_coex_vif_change(mvm);
f94045ed
EG		 1679 iwl_mvm_update_smps(mvm, vif, IWL_MVM_SMPS_REQ_TT,
1680 IEEE80211_SMPS_AUTOMATIC);
989c6505 1681 } else if (changes & BSS_CHANGED_BEACON_INFO) {
210a544e
JB		 1682 /*
1683 * We received a beacon _after_ association so
1684 * remove the session protection.
1685 */
1686 iwl_mvm_remove_time_event(mvm, mvmvif,
1687 &mvmvif->time_event_data);
8ca151b5 1688 }
cc87d322
EH		 1689
1690 if (changes & BSS_CHANGED_BEACON_INFO) {
1691 iwl_mvm_sf_update(mvm, vif, false);
1692 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0));
1693 }
1694
1bc10d3b
JB		 1695 if (changes & (BSS_CHANGED_PS | BSS_CHANGED_P2P_PS | BSS_CHANGED_QOS)) {
1696 ret = iwl_mvm_power_update_mac(mvm);
1697 if (ret)
1698 IWL_ERR(mvm, "failed to update power mode\n");
1699 }
1700
88f2fd73
MG		 1701 if (changes & BSS_CHANGED_TXPOWER) {
1702 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n",
1703 bss_conf->txpower);
1704 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower);
1705 }
a20fd398
AO		 1706
1707 if (changes & BSS_CHANGED_CQM) {
3c6acb61 1708 IWL_DEBUG_MAC80211(mvm, "cqm info_changed\n");
a20fd398
AO		 1709 /* reset cqm events tracking */
1710 mvmvif->bf_data.last_cqm_event = 0;
fa7b2e7f
AA		 1711 if (mvmvif->bf_data.bf_enabled) {
1712 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0);
1713 if (ret)
1714 IWL_ERR(mvm,
1715 "failed to update CQM thresholds\n");
1716 }
a20fd398 1717 }
2ee8f021
EP		 1718
1719 if (changes & BSS_CHANGED_ARP_FILTER) {
3c6acb61 1720 IWL_DEBUG_MAC80211(mvm, "arp filter changed\n");
2ee8f021
EP		 1721 iwl_mvm_configure_bcast_filter(mvm, vif);
1722 }
8ca151b5
JB		 1723}
1724
5023d966
JB		 1725static int iwl_mvm_start_ap_ibss(struct ieee80211_hw *hw,
1726 struct ieee80211_vif *vif)
8ca151b5
JB		 1727{
1728 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1729 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1730 int ret;
1731
576eeee9
EP		 1732 /*
1733 * iwl_mvm_mac_ctxt_add() might read directly from the device
1734 * (the system time), so make sure it is available.
1735 */
1736 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_START_AP);
1737 if (ret)
1738 return ret;
1739
8ca151b5
JB		 1740 mutex_lock(&mvm->mutex);
1741
1742 /* Send the beacon template */
1743 ret = iwl_mvm_mac_ctxt_beacon_changed(mvm, vif);
1744 if (ret)
1745 goto out_unlock;
1746
6e97b0d2
IP		 1747 /*
1748 * Re-calculate the tsf id, as the master-slave relations depend on the
1749 * beacon interval, which was not known when the AP interface was added.
1750 */
1751 if (vif->type == NL80211_IFTYPE_AP)
1752 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif);
1753
8ca151b5
JB		 1754 /* Add the mac context */
1755 ret = iwl_mvm_mac_ctxt_add(mvm, vif);
1756 if (ret)
1757 goto out_unlock;
1758
1759 /* Perform the binding */
1760 ret = iwl_mvm_binding_add_vif(mvm, vif);
1761 if (ret)
1762 goto out_remove;
1763
8ca151b5
JB		 1764 /* Send the bcast station. At this stage the TBTT and DTIM time events
1765 * are added and applied to the scheduler */
013290aa 1766 ret = iwl_mvm_send_add_bcast_sta(mvm, vif);
8ca151b5
JB		 1767 if (ret)
1768 goto out_unbind;
1769
5691e218
IP		 1770 /* must be set before quota calculations */
1771 mvmvif->ap_ibss_active = true;
1772
a11e144e 1773 /* power updated needs to be done before quotas */
999609f1 1774 iwl_mvm_power_update_mac(mvm);
a11e144e 1775
0166230c 1776 ret = iwl_mvm_update_quotas(mvm, NULL);
8ca151b5 1777 if (ret)
a11e144e 1778 goto out_quota_failed;
8ca151b5 1779
5023d966 1780 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */
8ca151b5 1781 if (vif->p2p && mvm->p2p_device_vif)
3dfd3a97 1782 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL);
8ca151b5 1783
29a90a49
EP		 1784 iwl_mvm_ref(mvm, IWL_MVM_REF_AP_IBSS);
1785
8e484f0b 1786 iwl_mvm_bt_coex_vif_change(mvm);
dac94da8 1787
f697267f
AN		 1788 /* we don't support TDLS during DCM */
1789 if (iwl_mvm_phy_ctx_count(mvm) > 1)
1790 iwl_mvm_teardown_tdls_peers(mvm);
1791
8ca151b5
JB		 1792 mutex_unlock(&mvm->mutex);
1793 return 0;
1794
a11e144e 1795out_quota_failed:
999609f1 1796 iwl_mvm_power_update_mac(mvm);
5691e218 1797 mvmvif->ap_ibss_active = false;
013290aa 1798 iwl_mvm_send_rm_bcast_sta(mvm, vif);
8ca151b5
JB		 1799out_unbind:
1800 iwl_mvm_binding_remove_vif(mvm, vif);
1801out_remove:
1802 iwl_mvm_mac_ctxt_remove(mvm, vif);
1803out_unlock:
1804 mutex_unlock(&mvm->mutex);
576eeee9 1805 iwl_mvm_unref(mvm, IWL_MVM_REF_START_AP);
8ca151b5
JB		 1806 return ret;
1807}
1808
5023d966
JB		 1809static void iwl_mvm_stop_ap_ibss(struct ieee80211_hw *hw,
1810 struct ieee80211_vif *vif)
8ca151b5
JB		 1811{
1812 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1813 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1814
38a12b5b
JB		 1815 iwl_mvm_prepare_mac_removal(mvm, vif);
1816
8ca151b5
JB		 1817 mutex_lock(&mvm->mutex);
1818
664322fa 1819 /* Handle AP stop while in CSA */
7f0a7c67
AO		 1820 if (rcu_access_pointer(mvm->csa_vif) == vif) {
1821 iwl_mvm_remove_time_event(mvm, mvmvif,
1822 &mvmvif->time_event_data);
664322fa 1823 RCU_INIT_POINTER(mvm->csa_vif, NULL);
7f0a7c67 1824 }
664322fa 1825
003e5236
AO		 1826 if (rcu_access_pointer(mvm->csa_tx_blocked_vif) == vif) {
1827 RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL);
1828 mvm->csa_tx_block_bcn_timeout = 0;
1829 }
1830
5023d966 1831 mvmvif->ap_ibss_active = false;
1c87bbad 1832 mvm->ap_last_beacon_gp2 = 0;
8ca151b5 1833
8e484f0b 1834 iwl_mvm_bt_coex_vif_change(mvm);
dac94da8 1835
29a90a49
EP		 1836 iwl_mvm_unref(mvm, IWL_MVM_REF_AP_IBSS);
1837
5023d966 1838 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */
8ca151b5 1839 if (vif->p2p && mvm->p2p_device_vif)
3dfd3a97 1840 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL);
8ca151b5 1841
0166230c 1842 iwl_mvm_update_quotas(mvm, NULL);
013290aa 1843 iwl_mvm_send_rm_bcast_sta(mvm, vif);
8ca151b5 1844 iwl_mvm_binding_remove_vif(mvm, vif);
a11e144e 1845
999609f1 1846 iwl_mvm_power_update_mac(mvm);
a11e144e 1847
8ca151b5
JB		 1848 iwl_mvm_mac_ctxt_remove(mvm, vif);
1849
1850 mutex_unlock(&mvm->mutex);
1851}
1852
5023d966
JB		 1853static void
1854iwl_mvm_bss_info_changed_ap_ibss(struct iwl_mvm *mvm,
1855 struct ieee80211_vif *vif,
1856 struct ieee80211_bss_conf *bss_conf,
1857 u32 changes)
8ca151b5 1858{
be2056fc 1859 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
8a5e3660 1860
be2056fc
IP		 1861 /* Changes will be applied when the AP/IBSS is started */
1862 if (!mvmvif->ap_ibss_active)
1863 return;
1864
863230da 1865 if (changes & (BSS_CHANGED_ERP_CTS_PROT | BSS_CHANGED_HT |
f7d8b702 1866 BSS_CHANGED_BANDWIDTH | BSS_CHANGED_QOS) &&
3dfd3a97 1867 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL))
863230da 1868 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr);
8a5e3660 1869
8ca151b5 1870 /* Need to send a new beacon template to the FW */
863230da
JB		 1871 if (changes & BSS_CHANGED_BEACON &&
1872 iwl_mvm_mac_ctxt_beacon_changed(mvm, vif))
1873 IWL_WARN(mvm, "Failed updating beacon data\n");
79b7a69d
HD		 1874
1875 if (changes & BSS_CHANGED_TXPOWER) {
1876 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n",
1877 bss_conf->txpower);
1878 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower);
1879 }
1880
8ca151b5
JB		 1881}
1882
1883static void iwl_mvm_bss_info_changed(struct ieee80211_hw *hw,
1884 struct ieee80211_vif *vif,
1885 struct ieee80211_bss_conf *bss_conf,
1886 u32 changes)
1887{
1888 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1889
576eeee9
EP		 1890 /*
1891 * iwl_mvm_bss_info_changed_station() might call
1892 * iwl_mvm_protect_session(), which reads directly from
1893 * the device (the system time), so make sure it is available.
1894 */
1895 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_BSS_CHANGED))
1896 return;
1897
8ca151b5
JB		 1898 mutex_lock(&mvm->mutex);
1899
723f02ed 1900 if (changes & BSS_CHANGED_IDLE && !bss_conf->idle)
fb98be5e 1901 iwl_mvm_scan_offload_stop(mvm, true);
723f02ed 1902
8ca151b5
JB		 1903 switch (vif->type) {
1904 case NL80211_IFTYPE_STATION:
1905 iwl_mvm_bss_info_changed_station(mvm, vif, bss_conf, changes);
1906 break;
1907 case NL80211_IFTYPE_AP:
5023d966
JB		 1908 case NL80211_IFTYPE_ADHOC:
1909 iwl_mvm_bss_info_changed_ap_ibss(mvm, vif, bss_conf, changes);
8ca151b5
JB		 1910 break;
1911 default:
1912 /* shouldn't happen */
1913 WARN_ON_ONCE(1);
1914 }
1915
1916 mutex_unlock(&mvm->mutex);
576eeee9 1917 iwl_mvm_unref(mvm, IWL_MVM_REF_BSS_CHANGED);
8ca151b5
JB		 1918}
1919
4660dfbb
EP		 1920static int iwl_mvm_cancel_scan_wait_notif(struct iwl_mvm *mvm,
1921 enum iwl_scan_status scan_type)
1922{
1923 int ret;
1924 bool wait_for_handlers = false;
1925
1926 mutex_lock(&mvm->mutex);
1927
1928 if (mvm->scan_status != scan_type) {
1929 ret = 0;
1930 /* make sure there are no pending notifications */
1931 wait_for_handlers = true;
1932 goto out;
1933 }
1934
1935 switch (scan_type) {
1936 case IWL_MVM_SCAN_SCHED:
1937 ret = iwl_mvm_scan_offload_stop(mvm, true);
1938 break;
1939 case IWL_MVM_SCAN_OS:
1940 ret = iwl_mvm_cancel_scan(mvm);
1941 break;
1942 case IWL_MVM_SCAN_NONE:
1943 default:
1944 WARN_ON_ONCE(1);
1945 ret = -EINVAL;
1946 break;
1947 }
1948 if (ret)
1949 goto out;
1950
1951 wait_for_handlers = true;
1952out:
1953 mutex_unlock(&mvm->mutex);
1954
1955 /* make sure we consume the completion notification */
1956 if (wait_for_handlers)
1957 iwl_mvm_wait_for_async_handlers(mvm);
1958
1959 return ret;
1960}
8ca151b5
JB		 1961static int iwl_mvm_mac_hw_scan(struct ieee80211_hw *hw,
1962 struct ieee80211_vif *vif,
c56ef672 1963 struct ieee80211_scan_request *hw_req)
8ca151b5
JB		 1964{
1965 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
c56ef672 1966 struct cfg80211_scan_request *req = &hw_req->req;
8ca151b5
JB		 1967 int ret;
1968
762533ba
DS		 1969 if (req->n_channels == 0 ||
1970 req->n_channels > mvm->fw->ucode_capa.n_scan_channels)
8ca151b5
JB		 1971 return -EINVAL;
1972
d2496221
DS		 1973 if (!(mvm->fw->ucode_capa.capa[0] & IWL_UCODE_TLV_CAPA_UMAC_SCAN)) {
1974 ret = iwl_mvm_cancel_scan_wait_notif(mvm, IWL_MVM_SCAN_SCHED);
1975 if (ret)
1976 return ret;
1977 }
4660dfbb 1978
8ca151b5
JB		 1979 mutex_lock(&mvm->mutex);
1980
4660dfbb 1981 if (mvm->scan_status != IWL_MVM_SCAN_NONE) {
8ca151b5 1982 ret = -EBUSY;
519e2026
AN		 1983 goto out;
1984 }
8ca151b5 1985
519e2026
AN		 1986 iwl_mvm_ref(mvm, IWL_MVM_REF_SCAN);
1987
b975e55a 1988 if (mvm->fw->ucode_capa.capa[0] & IWL_UCODE_TLV_CAPA_UMAC_SCAN)
d2496221 1989 ret = iwl_mvm_scan_umac(mvm, vif, hw_req);
b975e55a
DS		 1990 else if (mvm->fw->ucode_capa.api[0] & IWL_UCODE_TLV_API_LMAC_SCAN)
1991 ret = iwl_mvm_unified_scan_lmac(mvm, vif, hw_req);
fb98be5e
DS		 1992 else
1993 ret = iwl_mvm_scan_request(mvm, vif, req);
1994
519e2026
AN		 1995 if (ret)
1996 iwl_mvm_unref(mvm, IWL_MVM_REF_SCAN);
1997out:
8ca151b5 1998 mutex_unlock(&mvm->mutex);
8ca151b5
JB		 1999 return ret;
2000}
2001
2002static void iwl_mvm_mac_cancel_hw_scan(struct ieee80211_hw *hw,
2003 struct ieee80211_vif *vif)
2004{
2005 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2006
2007 mutex_lock(&mvm->mutex);
2008
2009 iwl_mvm_cancel_scan(mvm);
2010
2011 mutex_unlock(&mvm->mutex);
2012}
2013
2014static void
2015iwl_mvm_mac_allow_buffered_frames(struct ieee80211_hw *hw,
3e56eadf 2016 struct ieee80211_sta *sta, u16 tids,
8ca151b5
JB		 2017 int num_frames,
2018 enum ieee80211_frame_release_type reason,
2019 bool more_data)
2020{
2021 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
8ca151b5 2022
3e56eadf 2023 /* Called when we need to transmit (a) frame(s) from mac80211 */
8ca151b5 2024
3e56eadf
JB		 2025 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames,
2026 tids, more_data, false);
2027}
2028
2029static void
2030iwl_mvm_mac_release_buffered_frames(struct ieee80211_hw *hw,
2031 struct ieee80211_sta *sta, u16 tids,
2032 int num_frames,
2033 enum ieee80211_frame_release_type reason,
2034 bool more_data)
2035{
2036 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2037
2038 /* Called when we need to transmit (a) frame(s) from agg queue */
2039
2040 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames,
2041 tids, more_data, true);
8ca151b5
JB		 2042}
2043
2044static void iwl_mvm_mac_sta_notify(struct ieee80211_hw *hw,
2045 struct ieee80211_vif *vif,
2046 enum sta_notify_cmd cmd,
2047 struct ieee80211_sta *sta)
2048{
2049 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5b577a90 2050 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
3e56eadf 2051 int tid;
8ca151b5
JB		 2052
2053 switch (cmd) {
2054 case STA_NOTIFY_SLEEP:
e3d4bc8c 2055 if (atomic_read(&mvm->pending_frames[mvmsta->sta_id]) > 0)
8ca151b5 2056 ieee80211_sta_block_awake(hw, sta, true);
3e56eadf
JB		 2057 spin_lock_bh(&mvmsta->lock);
2058 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) {
2059 struct iwl_mvm_tid_data *tid_data;
2060
2061 tid_data = &mvmsta->tid_data[tid];
2062 if (tid_data->state != IWL_AGG_ON &&
2063 tid_data->state != IWL_EMPTYING_HW_QUEUE_DELBA)
2064 continue;
2065 if (iwl_mvm_tid_queued(tid_data) == 0)
2066 continue;
2067 ieee80211_sta_set_buffered(sta, tid, true);
2068 }
2069 spin_unlock_bh(&mvmsta->lock);
8ca151b5
JB		 2070 /*
2071 * The fw updates the STA to be asleep. Tx packets on the Tx
2072 * queues to this station will not be transmitted. The fw will
2073 * send a Tx response with TX_STATUS_FAIL_DEST_PS.
2074 */
2075 break;
2076 case STA_NOTIFY_AWAKE:
881acd89 2077 if (WARN_ON(mvmsta->sta_id == IWL_MVM_STATION_COUNT))
8ca151b5 2078 break;
9cc40712 2079 iwl_mvm_sta_modify_ps_wake(mvm, sta);
8ca151b5
JB		 2080 break;
2081 default:
2082 break;
2083 }
2084}
2085
1ddbbb0c
JB		 2086static void iwl_mvm_sta_pre_rcu_remove(struct ieee80211_hw *hw,
2087 struct ieee80211_vif *vif,
2088 struct ieee80211_sta *sta)
2089{
2090 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2091 struct iwl_mvm_sta *mvm_sta = (void *)sta->drv_priv;
2092
2093 /*
2094 * This is called before mac80211 does RCU synchronisation,
2095 * so here we already invalidate our internal RCU-protected
2096 * station pointer. The rest of the code will thus no longer
2097 * be able to find the station this way, and we don't rely
2098 * on further RCU synchronisation after the sta_state()
2099 * callback deleted the station.
2100 */
2101 mutex_lock(&mvm->mutex);
2102 if (sta == rcu_access_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id]))
2103 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id],
2104 ERR_PTR(-ENOENT));
2105 mutex_unlock(&mvm->mutex);
2106}
2107
8ca151b5
JB		 2108static int iwl_mvm_mac_sta_state(struct ieee80211_hw *hw,
2109 struct ieee80211_vif *vif,
2110 struct ieee80211_sta *sta,
2111 enum ieee80211_sta_state old_state,
2112 enum ieee80211_sta_state new_state)
2113{
2114 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2115 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2116 int ret;
2117
2118 IWL_DEBUG_MAC80211(mvm, "station %pM state change %d->%d\n",
2119 sta->addr, old_state, new_state);
2120
2121 /* this would be a mac80211 bug ... but don't crash */
2122 if (WARN_ON_ONCE(!mvmvif->phy_ctxt))
2123 return -EINVAL;
2124
2125 /* if a STA is being removed, reuse its ID */
2126 flush_work(&mvm->sta_drained_wk);
2127
2128 mutex_lock(&mvm->mutex);
2129 if (old_state == IEEE80211_STA_NOTEXIST &&
2130 new_state == IEEE80211_STA_NONE) {
48bc1307
JB		 2131 /*
2132 * Firmware bug - it'll crash if the beacon interval is less
2133 * than 16. We can't avoid connecting at all, so refuse the
2134 * station state change, this will cause mac80211 to abandon
2135 * attempts to connect to this AP, and eventually wpa_s will
2136 * blacklist the AP...
2137 */
2138 if (vif->type == NL80211_IFTYPE_STATION &&
2139 vif->bss_conf.beacon_int < 16) {
2140 IWL_ERR(mvm,
2141 "AP %pM beacon interval is %d, refusing due to firmware bug!\n",
2142 sta->addr, vif->bss_conf.beacon_int);
2143 ret = -EINVAL;
2144 goto out_unlock;
2145 }
cf7b491d
AN		 2146
2147 if (sta->tdls &&
2148 (vif->p2p ||
fa3d07e4
AN		 2149 iwl_mvm_tdls_sta_count(mvm, NULL) ==
2150 IWL_MVM_TDLS_STA_COUNT ||
cf7b491d
AN		 2151 iwl_mvm_phy_ctx_count(mvm) > 1)) {
2152 IWL_DEBUG_MAC80211(mvm, "refusing TDLS sta\n");
2153 ret = -EBUSY;
2154 goto out_unlock;
2155 }
2156
8ca151b5 2157 ret = iwl_mvm_add_sta(mvm, vif, sta);
fa3d07e4
AN		 2158 if (sta->tdls && ret == 0)
2159 iwl_mvm_recalc_tdls_state(mvm, vif, true);
8ca151b5
JB		 2160 } else if (old_state == IEEE80211_STA_NONE &&
2161 new_state == IEEE80211_STA_AUTH) {
e820c2da
HD		 2162 /*
2163 * EBS may be disabled due to previous failures reported by FW.
2164 * Reset EBS status here assuming environment has been changed.
2165 */
2166 mvm->last_ebs_successful = true;
8ca151b5
JB		 2167 ret = 0;
2168 } else if (old_state == IEEE80211_STA_AUTH &&
2169 new_state == IEEE80211_STA_ASSOC) {
7a453973
JB		 2170 ret = iwl_mvm_update_sta(mvm, vif, sta);
2171 if (ret == 0)
2172 iwl_mvm_rs_rate_init(mvm, sta,
b87c2179
ES		 2173 mvmvif->phy_ctxt->channel->band,
2174 true);
8ca151b5
JB		 2175 } else if (old_state == IEEE80211_STA_ASSOC &&
2176 new_state == IEEE80211_STA_AUTHORIZED) {
f59e0e3c
AN		 2177
2178 /* we don't support TDLS during DCM */
2179 if (iwl_mvm_phy_ctx_count(mvm) > 1)
2180 iwl_mvm_teardown_tdls_peers(mvm);
2181
7df15b1e 2182 /* enable beacon filtering */
fa7b2e7f 2183 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0));
8ca151b5
JB		 2184 ret = 0;
2185 } else if (old_state == IEEE80211_STA_AUTHORIZED &&
2186 new_state == IEEE80211_STA_ASSOC) {
7df15b1e 2187 /* disable beacon filtering */
a1022927 2188 WARN_ON(iwl_mvm_disable_beacon_filter(mvm, vif, 0));
8ca151b5
JB		 2189 ret = 0;
2190 } else if (old_state == IEEE80211_STA_ASSOC &&
2191 new_state == IEEE80211_STA_AUTH) {
2192 ret = 0;
2193 } else if (old_state == IEEE80211_STA_AUTH &&
2194 new_state == IEEE80211_STA_NONE) {
2195 ret = 0;
2196 } else if (old_state == IEEE80211_STA_NONE &&
2197 new_state == IEEE80211_STA_NOTEXIST) {
2198 ret = iwl_mvm_rm_sta(mvm, vif, sta);
fa3d07e4
AN		 2199 if (sta->tdls)
2200 iwl_mvm_recalc_tdls_state(mvm, vif, false);
8ca151b5
JB		 2201 } else {
2202 ret = -EIO;
2203 }
48bc1307 2204 out_unlock:
8ca151b5
JB		 2205 mutex_unlock(&mvm->mutex);
2206
9c126cd6
LK		 2207 if (sta->tdls && ret == 0) {
2208 if (old_state == IEEE80211_STA_NOTEXIST &&
2209 new_state == IEEE80211_STA_NONE)
2210 ieee80211_reserve_tid(sta, IWL_MVM_TDLS_FW_TID);
2211 else if (old_state == IEEE80211_STA_NONE &&
2212 new_state == IEEE80211_STA_NOTEXIST)
2213 ieee80211_unreserve_tid(sta, IWL_MVM_TDLS_FW_TID);
2214 }
2215
8ca151b5
JB		 2216 return ret;
2217}
2218
2219static int iwl_mvm_mac_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
2220{
2221 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2222
2223 mvm->rts_threshold = value;
2224
2225 return 0;
2226}
2227
1f3b0ff8
LE		 2228static void iwl_mvm_sta_rc_update(struct ieee80211_hw *hw,
2229 struct ieee80211_vif *vif,
2230 struct ieee80211_sta *sta, u32 changed)
2231{
2232 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2233
2234 if (vif->type == NL80211_IFTYPE_STATION &&
2235 changed & IEEE80211_RC_NSS_CHANGED)
2236 iwl_mvm_sf_update(mvm, vif, false);
2237}
2238
8ca151b5
JB		 2239static int iwl_mvm_mac_conf_tx(struct ieee80211_hw *hw,
2240 struct ieee80211_vif *vif, u16 ac,
2241 const struct ieee80211_tx_queue_params *params)
2242{
2243 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2244 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2245
2246 mvmvif->queue_params[ac] = *params;
2247
2248 /*
2249 * No need to update right away, we'll get BSS_CHANGED_QOS
2250 * The exception is P2P_DEVICE interface which needs immediate update.
2251 */
2252 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
2253 int ret;
2254
2255 mutex_lock(&mvm->mutex);
3dfd3a97 2256 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
8ca151b5
JB		 2257 mutex_unlock(&mvm->mutex);
2258 return ret;
2259 }
2260 return 0;
2261}
2262
2263static void iwl_mvm_mac_mgd_prepare_tx(struct ieee80211_hw *hw,
2264 struct ieee80211_vif *vif)
2265{
2266 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2267 u32 duration = min(IWL_MVM_TE_SESSION_PROTECTION_MAX_TIME_MS,
2268 200 + vif->bss_conf.beacon_int);
2269 u32 min_duration = min(IWL_MVM_TE_SESSION_PROTECTION_MIN_TIME_MS,
2270 100 + vif->bss_conf.beacon_int);
2271
2272 if (WARN_ON_ONCE(vif->bss_conf.assoc))
2273 return;
2274
576eeee9
EP		 2275 /*
2276 * iwl_mvm_protect_session() reads directly from the device
2277 * (the system time), so make sure it is available.
2278 */
2279 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PREPARE_TX))
2280 return;
2281
8ca151b5
JB		 2282 mutex_lock(&mvm->mutex);
2283 /* Try really hard to protect the session and hear a beacon */
d20d37bc 2284 iwl_mvm_protect_session(mvm, vif, duration, min_duration, 500, false);
8ca151b5 2285 mutex_unlock(&mvm->mutex);
576eeee9
EP		 2286
2287 iwl_mvm_unref(mvm, IWL_MVM_REF_PREPARE_TX);
8ca151b5
JB		 2288}
2289
35a000b7
DS		 2290static int iwl_mvm_mac_sched_scan_start(struct ieee80211_hw *hw,
2291 struct ieee80211_vif *vif,
2292 struct cfg80211_sched_scan_request *req,
633e2713 2293 struct ieee80211_scan_ies *ies)
35a000b7
DS		 2294{
2295 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2296 int ret;
2297
d2496221
DS		 2298 if (!(mvm->fw->ucode_capa.capa[0] & IWL_UCODE_TLV_CAPA_UMAC_SCAN)) {
2299 ret = iwl_mvm_cancel_scan_wait_notif(mvm, IWL_MVM_SCAN_OS);
2300 if (ret)
2301 return ret;
2302 }
4660dfbb 2303
35a000b7
DS		 2304 mutex_lock(&mvm->mutex);
2305
59ecb128
AB		 2306 /* Newest FW fixes sched scan while connected on another interface */
2307 if (mvm->fw->ucode_capa.api[0] & IWL_UCODE_TLV_API_LMAC_SCAN) {
2308 if (!vif->bss_conf.idle) {
2309 ret = -EBUSY;
2310 goto out;
2311 }
2312 } else if (!iwl_mvm_is_idle(mvm)) {
bd5e4744
DS		 2313 ret = -EBUSY;
2314 goto out;
2315 }
2316
4660dfbb 2317 if (mvm->scan_status != IWL_MVM_SCAN_NONE) {
35a000b7
DS		 2318 ret = -EBUSY;
2319 goto out;
2320 }
2321
b141c235 2322 ret = iwl_mvm_scan_offload_start(mvm, vif, req, ies);
35a000b7 2323 if (ret)
b141c235 2324 mvm->scan_status = IWL_MVM_SCAN_NONE;
d2496221 2325
35a000b7
DS		 2326out:
2327 mutex_unlock(&mvm->mutex);
2328 return ret;
2329}
2330
37e3308c
JB		 2331static int iwl_mvm_mac_sched_scan_stop(struct ieee80211_hw *hw,
2332 struct ieee80211_vif *vif)
35a000b7
DS		 2333{
2334 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
33ea27f6 2335 int ret;
35a000b7
DS		 2336
2337 mutex_lock(&mvm->mutex);
fb98be5e 2338 ret = iwl_mvm_scan_offload_stop(mvm, false);
35a000b7 2339 mutex_unlock(&mvm->mutex);
33ea27f6 2340 iwl_mvm_wait_for_async_handlers(mvm);
37e3308c 2341
33ea27f6 2342 return ret;
d2496221 2343
35a000b7
DS		 2344}
2345
8ca151b5
JB		 2346static int iwl_mvm_mac_set_key(struct ieee80211_hw *hw,
2347 enum set_key_cmd cmd,
2348 struct ieee80211_vif *vif,
2349 struct ieee80211_sta *sta,
2350 struct ieee80211_key_conf *key)
2351{
2352 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2353 int ret;
2354
2355 if (iwlwifi_mod_params.sw_crypto) {
2356 IWL_DEBUG_MAC80211(mvm, "leave - hwcrypto disabled\n");
2357 return -EOPNOTSUPP;
2358 }
2359
2360 switch (key->cipher) {
2361 case WLAN_CIPHER_SUITE_TKIP:
2362 key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
2363 /* fall-through */
2364 case WLAN_CIPHER_SUITE_CCMP:
2365 key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
2366 break;
2367 case WLAN_CIPHER_SUITE_AES_CMAC:
2368 WARN_ON_ONCE(!(hw->flags & IEEE80211_HW_MFP_CAPABLE));
2369 break;
2370 case WLAN_CIPHER_SUITE_WEP40:
2371 case WLAN_CIPHER_SUITE_WEP104:
ba3943b0
JB		 2372 /* For non-client mode, only use WEP keys for TX as we probably
2373 * don't have a station yet anyway and would then have to keep
2374 * track of the keys, linking them to each of the clients/peers
2375 * as they appear. For now, don't do that, for performance WEP
2376 * offload doesn't really matter much, but we need it for some
2377 * other offload features in client mode.
8ca151b5 2378 */
ba3943b0
JB		 2379 if (vif->type != NL80211_IFTYPE_STATION)
2380 return 0;
2381 break;
8ca151b5 2382 default:
e36e5433
MS		 2383 /* currently FW supports only one optional cipher scheme */
2384 if (hw->n_cipher_schemes &&
2385 hw->cipher_schemes->cipher == key->cipher)
2386 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
2387 else
2388 return -EOPNOTSUPP;
8ca151b5
JB		 2389 }
2390
2391 mutex_lock(&mvm->mutex);
2392
2393 switch (cmd) {
2394 case SET_KEY:
5023d966
JB		 2395 if ((vif->type == NL80211_IFTYPE_ADHOC ||
2396 vif->type == NL80211_IFTYPE_AP) && !sta) {
2397 /*
2398 * GTK on AP interface is a TX-only key, return 0;
2399 * on IBSS they're per-station and because we're lazy
2400 * we don't support them for RX, so do the same.
2401 */
6caffd4f
JB		 2402 ret = 0;
2403 key->hw_key_idx = STA_KEY_IDX_INVALID;
2404 break;
2405 }
2406
8ca151b5
JB		 2407 IWL_DEBUG_MAC80211(mvm, "set hwcrypto key\n");
2408 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, false);
2409 if (ret) {
2410 IWL_WARN(mvm, "set key failed\n");
2411 /*
2412 * can't add key for RX, but we don't need it
2413 * in the device for TX so still return 0
2414 */
6caffd4f 2415 key->hw_key_idx = STA_KEY_IDX_INVALID;
8ca151b5
JB		 2416 ret = 0;
2417 }
2418
2419 break;
2420 case DISABLE_KEY:
6caffd4f
JB		 2421 if (key->hw_key_idx == STA_KEY_IDX_INVALID) {
2422 ret = 0;
2423 break;
2424 }
2425
8ca151b5
JB		 2426 IWL_DEBUG_MAC80211(mvm, "disable hwcrypto key\n");
2427 ret = iwl_mvm_remove_sta_key(mvm, vif, sta, key);
2428 break;
2429 default:
2430 ret = -EINVAL;
2431 }
2432
2433 mutex_unlock(&mvm->mutex);
2434 return ret;
2435}
2436
2437static void iwl_mvm_mac_update_tkip_key(struct ieee80211_hw *hw,
2438 struct ieee80211_vif *vif,
2439 struct ieee80211_key_conf *keyconf,
2440 struct ieee80211_sta *sta,
2441 u32 iv32, u16 *phase1key)
2442{
2443 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2444
5023d966
JB		 2445 if (keyconf->hw_key_idx == STA_KEY_IDX_INVALID)
2446 return;
2447
8ca151b5
JB		 2448 iwl_mvm_update_tkip_key(mvm, vif, keyconf, sta, iv32, phase1key);
2449}
2450
2451
b112889c
AM		 2452static bool iwl_mvm_rx_aux_roc(struct iwl_notif_wait_data *notif_wait,
2453 struct iwl_rx_packet *pkt, void *data)
2454{
2455 struct iwl_mvm *mvm =
2456 container_of(notif_wait, struct iwl_mvm, notif_wait);
2457 struct iwl_hs20_roc_res *resp;
2458 int resp_len = iwl_rx_packet_payload_len(pkt);
2459 struct iwl_mvm_time_event_data *te_data = data;
2460
2461 if (WARN_ON(pkt->hdr.cmd != HOT_SPOT_CMD))
2462 return true;
2463
2464 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) {
2465 IWL_ERR(mvm, "Invalid HOT_SPOT_CMD response\n");
2466 return true;
2467 }
2468
2469 resp = (void *)pkt->data;
2470
2471 IWL_DEBUG_TE(mvm,
2472 "Aux ROC: Recieved response from ucode: status=%d uid=%d\n",
2473 resp->status, resp->event_unique_id);
2474
2475 te_data->uid = le32_to_cpu(resp->event_unique_id);
2476 IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n",
2477 te_data->uid);
2478
2479 spin_lock_bh(&mvm->time_event_lock);
2480 list_add_tail(&te_data->list, &mvm->aux_roc_te_list);
2481 spin_unlock_bh(&mvm->time_event_lock);
2482
2483 return true;
2484}
2485
2486#define AUX_ROC_MAX_DELAY_ON_CHANNEL 5000
2487static int iwl_mvm_send_aux_roc_cmd(struct iwl_mvm *mvm,
2488 struct ieee80211_channel *channel,
2489 struct ieee80211_vif *vif,
2490 int duration)
2491{
2492 int res, time_reg = DEVICE_SYSTEM_TIME_REG;
2493 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2494 struct iwl_mvm_time_event_data *te_data = &mvmvif->hs_time_event_data;
2495 static const u8 time_event_response[] = { HOT_SPOT_CMD };
2496 struct iwl_notification_wait wait_time_event;
2497 struct iwl_hs20_roc_req aux_roc_req = {
2498 .action = cpu_to_le32(FW_CTXT_ACTION_ADD),
2499 .id_and_color =
2500 cpu_to_le32(FW_CMD_ID_AND_COLOR(MAC_INDEX_AUX, 0)),
2501 .sta_id_and_color = cpu_to_le32(mvm->aux_sta.sta_id),
2502 /* Set the channel info data */
2503 .channel_info.band = (channel->band == IEEE80211_BAND_2GHZ) ?
2504 PHY_BAND_24 : PHY_BAND_5,
2505 .channel_info.channel = channel->hw_value,
2506 .channel_info.width = PHY_VHT_CHANNEL_MODE20,
2507 /* Set the time and duration */
2508 .apply_time = cpu_to_le32(iwl_read_prph(mvm->trans, time_reg)),
2509 .apply_time_max_delay =
2510 cpu_to_le32(MSEC_TO_TU(AUX_ROC_MAX_DELAY_ON_CHANNEL)),
2511 .duration = cpu_to_le32(MSEC_TO_TU(duration)),
2512 };
2513
2514 /* Set the node address */
2515 memcpy(aux_roc_req.node_addr, vif->addr, ETH_ALEN);
2516
a6cc5163
MG		 2517 lockdep_assert_held(&mvm->mutex);
2518
2519 spin_lock_bh(&mvm->time_event_lock);
2520
2521 if (WARN_ON(te_data->id == HOT_SPOT_CMD)) {
2522 spin_unlock_bh(&mvm->time_event_lock);
2523 return -EIO;
2524 }
2525
b112889c
AM		 2526 te_data->vif = vif;
2527 te_data->duration = duration;
2528 te_data->id = HOT_SPOT_CMD;
2529
b112889c
AM		 2530 spin_unlock_bh(&mvm->time_event_lock);
2531
2532 /*
2533 * Use a notification wait, which really just processes the
2534 * command response and doesn't wait for anything, in order
2535 * to be able to process the response and get the UID inside
2536 * the RX path. Using CMD_WANT_SKB doesn't work because it
2537 * stores the buffer and then wakes up this thread, by which
2538 * time another notification (that the time event started)
2539 * might already be processed unsuccessfully.
2540 */
2541 iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event,
2542 time_event_response,
2543 ARRAY_SIZE(time_event_response),
2544 iwl_mvm_rx_aux_roc, te_data);
2545
2546 res = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0, sizeof(aux_roc_req),
2547 &aux_roc_req);
2548
2549 if (res) {
2550 IWL_ERR(mvm, "Couldn't send HOT_SPOT_CMD: %d\n", res);
2551 iwl_remove_notification(&mvm->notif_wait, &wait_time_event);
2552 goto out_clear_te;
2553 }
2554
2555 /* No need to wait for anything, so just pass 1 (0 isn't valid) */
2556 res = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1);
2557 /* should never fail */
2558 WARN_ON_ONCE(res);
2559
2560 if (res) {
2561 out_clear_te:
2562 spin_lock_bh(&mvm->time_event_lock);
2563 iwl_mvm_te_clear_data(mvm, te_data);
2564 spin_unlock_bh(&mvm->time_event_lock);
2565 }
2566
2567 return res;
2568}
2569
8ca151b5
JB		 2570static int iwl_mvm_roc(struct ieee80211_hw *hw,
2571 struct ieee80211_vif *vif,
2572 struct ieee80211_channel *channel,
d339d5ca
IP		 2573 int duration,
2574 enum ieee80211_roc_type type)
8ca151b5
JB		 2575{
2576 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
fe0f2de3 2577 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
8ca151b5 2578 struct cfg80211_chan_def chandef;
31d385ae
IP		 2579 struct iwl_mvm_phy_ctxt *phy_ctxt;
2580 int ret, i;
2581
2582 IWL_DEBUG_MAC80211(mvm, "enter (%d, %d, %d)\n", channel->hw_value,
2583 duration, type);
8ca151b5 2584
a6cc5163
MG		 2585 mutex_lock(&mvm->mutex);
2586
b112889c
AM		 2587 switch (vif->type) {
2588 case NL80211_IFTYPE_STATION:
5ac6c72e
LC		 2589 if (mvm->fw->ucode_capa.capa[0] &
2590 IWL_UCODE_TLV_CAPA_HOTSPOT_SUPPORT) {
2591 /* Use aux roc framework (HS20) */
2592 ret = iwl_mvm_send_aux_roc_cmd(mvm, channel,
2593 vif, duration);
2594 goto out_unlock;
2595 }
2596 IWL_ERR(mvm, "hotspot not supported\n");
2597 ret = -EINVAL;
a6cc5163 2598 goto out_unlock;
b112889c
AM		 2599 case NL80211_IFTYPE_P2P_DEVICE:
2600 /* handle below */
2601 break;
2602 default:
2603 IWL_ERR(mvm, "vif isn't P2P_DEVICE: %d\n", vif->type);
a6cc5163
MG		 2604 ret = -EINVAL;
2605 goto out_unlock;
8ca151b5
JB		 2606 }
2607
31d385ae
IP		 2608 for (i = 0; i < NUM_PHY_CTX; i++) {
2609 phy_ctxt = &mvm->phy_ctxts[i];
2610 if (phy_ctxt->ref == 0 || mvmvif->phy_ctxt == phy_ctxt)
2611 continue;
2612
2613 if (phy_ctxt->ref && channel == phy_ctxt->channel) {
2614 /*
2615 * Unbind the P2P_DEVICE from the current PHY context,
2616 * and if the PHY context is not used remove it.
2617 */
2618 ret = iwl_mvm_binding_remove_vif(mvm, vif);
2619 if (WARN(ret, "Failed unbinding P2P_DEVICE\n"))
2620 goto out_unlock;
2621
2622 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
2623
2624 /* Bind the P2P_DEVICE to the current PHY Context */
2625 mvmvif->phy_ctxt = phy_ctxt;
2626
2627 ret = iwl_mvm_binding_add_vif(mvm, vif);
2628 if (WARN(ret, "Failed binding P2P_DEVICE\n"))
2629 goto out_unlock;
2630
2631 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
2632 goto schedule_time_event;
2633 }
2634 }
2635
2636 /* Need to update the PHY context only if the ROC channel changed */
2637 if (channel == mvmvif->phy_ctxt->channel)
2638 goto schedule_time_event;
2639
8ca151b5 2640 cfg80211_chandef_create(&chandef, channel, NL80211_CHAN_NO_HT);
8ca151b5 2641
31d385ae
IP		 2642 /*
2643 * Change the PHY context configuration as it is currently referenced
2644 * only by the P2P Device MAC
2645 */
2646 if (mvmvif->phy_ctxt->ref == 1) {
2647 ret = iwl_mvm_phy_ctxt_changed(mvm, mvmvif->phy_ctxt,
2648 &chandef, 1, 1);
2649 if (ret)
2650 goto out_unlock;
2651 } else {
2652 /*
2653 * The PHY context is shared with other MACs. Need to remove the
2654 * P2P Device from the binding, allocate an new PHY context and
2655 * create a new binding
2656 */
2657 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
2658 if (!phy_ctxt) {
2659 ret = -ENOSPC;
2660 goto out_unlock;
2661 }
2662
2663 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &chandef,
2664 1, 1);
2665 if (ret) {
2666 IWL_ERR(mvm, "Failed to change PHY context\n");
2667 goto out_unlock;
2668 }
2669
2670 /* Unbind the P2P_DEVICE from the current PHY context */
2671 ret = iwl_mvm_binding_remove_vif(mvm, vif);
2672 if (WARN(ret, "Failed unbinding P2P_DEVICE\n"))
2673 goto out_unlock;
2674
2675 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
2676
2677 /* Bind the P2P_DEVICE to the new allocated PHY context */
2678 mvmvif->phy_ctxt = phy_ctxt;
2679
2680 ret = iwl_mvm_binding_add_vif(mvm, vif);
2681 if (WARN(ret, "Failed binding P2P_DEVICE\n"))
2682 goto out_unlock;
2683
2684 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
2685 }
2686
2687schedule_time_event:
8ca151b5 2688 /* Schedule the time events */
e635c797 2689 ret = iwl_mvm_start_p2p_roc(mvm, vif, duration, type);
8ca151b5 2690
31d385ae 2691out_unlock:
8ca151b5
JB		 2692 mutex_unlock(&mvm->mutex);
2693 IWL_DEBUG_MAC80211(mvm, "leave\n");
8ca151b5
JB		 2694 return ret;
2695}
2696
2697static int iwl_mvm_cancel_roc(struct ieee80211_hw *hw)
2698{
2699 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2700
2701 IWL_DEBUG_MAC80211(mvm, "enter\n");
2702
2703 mutex_lock(&mvm->mutex);
bf5da87f 2704 iwl_mvm_stop_roc(mvm);
8ca151b5
JB		 2705 mutex_unlock(&mvm->mutex);
2706
2707 IWL_DEBUG_MAC80211(mvm, "leave\n");
2708 return 0;
2709}
2710
b08c1d97
LC		 2711static int __iwl_mvm_add_chanctx(struct iwl_mvm *mvm,
2712 struct ieee80211_chanctx_conf *ctx)
8ca151b5 2713{
fe0f2de3
IP		 2714 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
2715 struct iwl_mvm_phy_ctxt *phy_ctxt;
8ca151b5
JB		 2716 int ret;
2717
b08c1d97
LC		 2718 lockdep_assert_held(&mvm->mutex);
2719
53a9d61e 2720 IWL_DEBUG_MAC80211(mvm, "Add channel context\n");
fe0f2de3 2721
fe0f2de3
IP		 2722 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
2723 if (!phy_ctxt) {
2724 ret = -ENOSPC;
2725 goto out;
2726 }
8ca151b5 2727
dcbc3e1a 2728 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def,
53a9d61e
IP		 2729 ctx->rx_chains_static,
2730 ctx->rx_chains_dynamic);
fe0f2de3
IP		 2731 if (ret) {
2732 IWL_ERR(mvm, "Failed to add PHY context\n");
2733 goto out;
2734 }
2735
53a9d61e 2736 iwl_mvm_phy_ctxt_ref(mvm, phy_ctxt);
fe0f2de3
IP		 2737 *phy_ctxt_id = phy_ctxt->id;
2738out:
b08c1d97
LC		 2739 return ret;
2740}
2741
2742static int iwl_mvm_add_chanctx(struct ieee80211_hw *hw,
2743 struct ieee80211_chanctx_conf *ctx)
2744{
2745 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2746 int ret;
2747
2748 mutex_lock(&mvm->mutex);
2749 ret = __iwl_mvm_add_chanctx(mvm, ctx);
8ca151b5 2750 mutex_unlock(&mvm->mutex);
b08c1d97 2751
8ca151b5
JB		 2752 return ret;
2753}
2754
b08c1d97
LC		 2755static void __iwl_mvm_remove_chanctx(struct iwl_mvm *mvm,
2756 struct ieee80211_chanctx_conf *ctx)
2757{
2758 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
2759 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
2760
2761 lockdep_assert_held(&mvm->mutex);
2762
2763 iwl_mvm_phy_ctxt_unref(mvm, phy_ctxt);
2764}
2765
8ca151b5
JB		 2766static void iwl_mvm_remove_chanctx(struct ieee80211_hw *hw,
2767 struct ieee80211_chanctx_conf *ctx)
2768{
2769 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
8ca151b5
JB		 2770
2771 mutex_lock(&mvm->mutex);
b08c1d97 2772 __iwl_mvm_remove_chanctx(mvm, ctx);
8ca151b5
JB		 2773 mutex_unlock(&mvm->mutex);
2774}
2775
2776static void iwl_mvm_change_chanctx(struct ieee80211_hw *hw,
2777 struct ieee80211_chanctx_conf *ctx,
2778 u32 changed)
2779{
2780 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
fe0f2de3
IP		 2781 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
2782 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
8ca151b5 2783
31d385ae
IP		 2784 if (WARN_ONCE((phy_ctxt->ref > 1) &&
2785 (changed & ~(IEEE80211_CHANCTX_CHANGE_WIDTH |
2786 IEEE80211_CHANCTX_CHANGE_RX_CHAINS |
2dceedae
AN		 2787 IEEE80211_CHANCTX_CHANGE_RADAR |
2788 IEEE80211_CHANCTX_CHANGE_MIN_WIDTH)),
31d385ae
IP		 2789 "Cannot change PHY. Ref=%d, changed=0x%X\n",
2790 phy_ctxt->ref, changed))
2791 return;
2792
8ca151b5 2793 mutex_lock(&mvm->mutex);
4d66449a 2794 iwl_mvm_bt_coex_vif_change(mvm);
dcbc3e1a 2795 iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def,
8ca151b5
JB		 2796 ctx->rx_chains_static,
2797 ctx->rx_chains_dynamic);
2798 mutex_unlock(&mvm->mutex);
2799}
2800
b08c1d97
LC		 2801static int __iwl_mvm_assign_vif_chanctx(struct iwl_mvm *mvm,
2802 struct ieee80211_vif *vif,
f0c97783
LC		 2803 struct ieee80211_chanctx_conf *ctx,
2804 bool switching_chanctx)
8ca151b5 2805{
fe0f2de3
IP		 2806 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
2807 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
8ca151b5
JB		 2808 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2809 int ret;
2810
b08c1d97 2811 lockdep_assert_held(&mvm->mutex);
8ca151b5 2812
fe0f2de3 2813 mvmvif->phy_ctxt = phy_ctxt;
8ca151b5
JB		 2814
2815 switch (vif->type) {
2816 case NL80211_IFTYPE_AP:
4741dd04
LC		 2817 /* only needed if we're switching chanctx (i.e. during CSA) */
2818 if (switching_chanctx) {
bd3398e2
AO		 2819 mvmvif->ap_ibss_active = true;
2820 break;
2821 }
5023d966 2822 case NL80211_IFTYPE_ADHOC:
8ca151b5
JB		 2823 /*
2824 * The AP binding flow is handled as part of the start_ap flow
5023d966 2825 * (in bss_info_changed), similarly for IBSS.
8ca151b5
JB		 2826 */
2827 ret = 0;
b08c1d97 2828 goto out;
8ca151b5 2829 case NL80211_IFTYPE_STATION:
2533edce 2830 break;
8ca151b5 2831 case NL80211_IFTYPE_MONITOR:
2533edce
LC		 2832 /* always disable PS when a monitor interface is active */
2833 mvmvif->ps_disabled = true;
8ca151b5
JB		 2834 break;
2835 default:
2836 ret = -EINVAL;
b08c1d97 2837 goto out;
8ca151b5
JB		 2838 }
2839
2840 ret = iwl_mvm_binding_add_vif(mvm, vif);
2841 if (ret)
b08c1d97 2842 goto out;
8ca151b5
JB		 2843
2844 /*
92d85562
AB		 2845 * Power state must be updated before quotas,
2846 * otherwise fw will complain.
2847 */
999609f1 2848 iwl_mvm_power_update_mac(mvm);
92d85562
AB		 2849
2850 /* Setting the quota at this stage is only required for monitor
8ca151b5
JB		 2851 * interfaces. For the other types, the bss_info changed flow
2852 * will handle quota settings.
2853 */
2854 if (vif->type == NL80211_IFTYPE_MONITOR) {
1e1391ca 2855 mvmvif->monitor_active = true;
0166230c 2856 ret = iwl_mvm_update_quotas(mvm, NULL);
8ca151b5
JB		 2857 if (ret)
2858 goto out_remove_binding;
2859 }
2860
bd3398e2 2861 /* Handle binding during CSA */
a57c688d 2862 if (vif->type == NL80211_IFTYPE_AP) {
0166230c 2863 iwl_mvm_update_quotas(mvm, NULL);
3dfd3a97 2864 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
bd3398e2
AO		 2865 }
2866
4741dd04 2867 if (switching_chanctx && vif->type == NL80211_IFTYPE_STATION) {
686e7fe1
LC		 2868 u32 duration = 2 * vif->bss_conf.beacon_int;
2869
2870 /* iwl_mvm_protect_session() reads directly from the
2871 * device (the system time), so make sure it is
2872 * available.
2873 */
2874 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PROTECT_CSA);
2875 if (ret)
2876 goto out_remove_binding;
2877
2878 /* Protect the session to make sure we hear the first
2879 * beacon on the new channel.
2880 */
2881 iwl_mvm_protect_session(mvm, vif, duration, duration,
2882 vif->bss_conf.beacon_int / 2,
2883 true);
2884
2885 iwl_mvm_unref(mvm, IWL_MVM_REF_PROTECT_CSA);
2886
a57c688d 2887 iwl_mvm_update_quotas(mvm, NULL);
0ce04ce7
LC		 2888 }
2889
b08c1d97 2890 goto out;
8ca151b5 2891
b08c1d97 2892out_remove_binding:
8ca151b5 2893 iwl_mvm_binding_remove_vif(mvm, vif);
999609f1 2894 iwl_mvm_power_update_mac(mvm);
b08c1d97 2895out:
8ca151b5
JB		 2896 if (ret)
2897 mvmvif->phy_ctxt = NULL;
2898 return ret;
2899}
b08c1d97
LC		 2900static int iwl_mvm_assign_vif_chanctx(struct ieee80211_hw *hw,
2901 struct ieee80211_vif *vif,
2902 struct ieee80211_chanctx_conf *ctx)
8ca151b5
JB		 2903{
2904 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
b08c1d97 2905 int ret;
8ca151b5
JB		 2906
2907 mutex_lock(&mvm->mutex);
f0c97783 2908 ret = __iwl_mvm_assign_vif_chanctx(mvm, vif, ctx, false);
b08c1d97
LC		 2909 mutex_unlock(&mvm->mutex);
2910
2911 return ret;
2912}
2913
2914static void __iwl_mvm_unassign_vif_chanctx(struct iwl_mvm *mvm,
2915 struct ieee80211_vif *vif,
f0c97783
LC		 2916 struct ieee80211_chanctx_conf *ctx,
2917 bool switching_chanctx)
b08c1d97
LC		 2918{
2919 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
f0c97783 2920 struct ieee80211_vif *disabled_vif = NULL;
b08c1d97
LC		 2921
2922 lockdep_assert_held(&mvm->mutex);
8ca151b5
JB		 2923
2924 iwl_mvm_remove_time_event(mvm, mvmvif, &mvmvif->time_event_data);
2925
8ca151b5 2926 switch (vif->type) {
5023d966 2927 case NL80211_IFTYPE_ADHOC:
b08c1d97 2928 goto out;
8ca151b5 2929 case NL80211_IFTYPE_MONITOR:
1e1391ca 2930 mvmvif->monitor_active = false;
2533edce 2931 mvmvif->ps_disabled = false;
8ca151b5 2932 break;
bd3398e2
AO		 2933 case NL80211_IFTYPE_AP:
2934 /* This part is triggered only during CSA */
4741dd04 2935 if (!switching_chanctx || !mvmvif->ap_ibss_active)
b08c1d97 2936 goto out;
bd3398e2 2937
7ef0aab6
AO		 2938 mvmvif->csa_countdown = false;
2939
003e5236
AO		 2940 /* Set CS bit on all the stations */
2941 iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, true);
2942
2943 /* Save blocked iface, the timeout is set on the next beacon */
2944 rcu_assign_pointer(mvm->csa_tx_blocked_vif, vif);
2945
bd3398e2 2946 mvmvif->ap_ibss_active = false;
f0c97783
LC		 2947 break;
2948 case NL80211_IFTYPE_STATION:
2949 if (!switching_chanctx)
2950 break;
2951
2952 disabled_vif = vif;
2953
3dfd3a97 2954 iwl_mvm_mac_ctxt_changed(mvm, vif, true, NULL);
f0c97783 2955 break;
8ca151b5
JB		 2956 default:
2957 break;
2958 }
2959
f0c97783 2960 iwl_mvm_update_quotas(mvm, disabled_vif);
1e1391ca 2961 iwl_mvm_binding_remove_vif(mvm, vif);
1c2abf72 2962
b08c1d97 2963out:
a11e144e 2964 mvmvif->phy_ctxt = NULL;
999609f1 2965 iwl_mvm_power_update_mac(mvm);
b08c1d97
LC		 2966}
2967
2968static void iwl_mvm_unassign_vif_chanctx(struct ieee80211_hw *hw,
2969 struct ieee80211_vif *vif,
2970 struct ieee80211_chanctx_conf *ctx)
2971{
2972 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2973
2974 mutex_lock(&mvm->mutex);
f0c97783 2975 __iwl_mvm_unassign_vif_chanctx(mvm, vif, ctx, false);
8ca151b5
JB		 2976 mutex_unlock(&mvm->mutex);
2977}
2978
50cc9574
LC		 2979static int
2980iwl_mvm_switch_vif_chanctx_swap(struct iwl_mvm *mvm,
2981 struct ieee80211_vif_chanctx_switch *vifs)
b08c1d97 2982{
b08c1d97
LC		 2983 int ret;
2984
b08c1d97 2985 mutex_lock(&mvm->mutex);
f0c97783 2986 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true);
b08c1d97
LC		 2987 __iwl_mvm_remove_chanctx(mvm, vifs[0].old_ctx);
2988
2989 ret = __iwl_mvm_add_chanctx(mvm, vifs[0].new_ctx);
2990 if (ret) {
2991 IWL_ERR(mvm, "failed to add new_ctx during channel switch\n");
2992 goto out_reassign;
2993 }
2994
f0c97783
LC		 2995 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx,
2996 true);
b08c1d97
LC		 2997 if (ret) {
2998 IWL_ERR(mvm,
2999 "failed to assign new_ctx during channel switch\n");
3000 goto out_remove;
3001 }
3002
f697267f
AN		 3003 /* we don't support TDLS during DCM - can be caused by channel switch */
3004 if (iwl_mvm_phy_ctx_count(mvm) > 1)
3005 iwl_mvm_teardown_tdls_peers(mvm);
3006
b08c1d97
LC		 3007 goto out;
3008
3009out_remove:
3010 __iwl_mvm_remove_chanctx(mvm, vifs[0].new_ctx);
3011
3012out_reassign:
6fd1fb63 3013 if (__iwl_mvm_add_chanctx(mvm, vifs[0].old_ctx)) {
b08c1d97
LC		 3014 IWL_ERR(mvm, "failed to add old_ctx back after failure.\n");
3015 goto out_restart;
3016 }
3017
6fd1fb63
LC		 3018 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx,
3019 true)) {
b08c1d97
LC		 3020 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n");
3021 goto out_restart;
3022 }
3023
3024 goto out;
3025
3026out_restart:
3027 /* things keep failing, better restart the hw */
3028 iwl_mvm_nic_restart(mvm, false);
3029
3030out:
3031 mutex_unlock(&mvm->mutex);
50cc9574
LC		 3032
3033 return ret;
3034}
3035
48a256e8
LC		 3036static int
3037iwl_mvm_switch_vif_chanctx_reassign(struct iwl_mvm *mvm,
3038 struct ieee80211_vif_chanctx_switch *vifs)
3039{
3040 int ret;
3041
3042 mutex_lock(&mvm->mutex);
3043 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true);
3044
3045 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx,
3046 true);
3047 if (ret) {
3048 IWL_ERR(mvm,
3049 "failed to assign new_ctx during channel switch\n");
3050 goto out_reassign;
3051 }
3052
3053 goto out;
3054
3055out_reassign:
3056 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx,
3057 true)) {
3058 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n");
3059 goto out_restart;
3060 }
3061
3062 goto out;
3063
3064out_restart:
3065 /* things keep failing, better restart the hw */
3066 iwl_mvm_nic_restart(mvm, false);
3067
3068out:
3069 mutex_unlock(&mvm->mutex);
3070
3071 return ret;
3072}
3073
50cc9574
LC		 3074static int iwl_mvm_switch_vif_chanctx(struct ieee80211_hw *hw,
3075 struct ieee80211_vif_chanctx_switch *vifs,
3076 int n_vifs,
3077 enum ieee80211_chanctx_switch_mode mode)
3078{
3079 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3080 int ret;
3081
3082 /* we only support a single-vif right now */
3083 if (n_vifs > 1)
3084 return -EOPNOTSUPP;
3085
3086 switch (mode) {
3087 case CHANCTX_SWMODE_SWAP_CONTEXTS:
3088 ret = iwl_mvm_switch_vif_chanctx_swap(mvm, vifs);
3089 break;
3090 case CHANCTX_SWMODE_REASSIGN_VIF:
48a256e8 3091 ret = iwl_mvm_switch_vif_chanctx_reassign(mvm, vifs);
50cc9574
LC		 3092 break;
3093 default:
3094 ret = -EOPNOTSUPP;
3095 break;
3096 }
3097
b08c1d97
LC		 3098 return ret;
3099}
3100
8ca151b5
JB		 3101static int iwl_mvm_set_tim(struct ieee80211_hw *hw,
3102 struct ieee80211_sta *sta,
3103 bool set)
3104{
3105 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3106 struct iwl_mvm_sta *mvm_sta = (void *)sta->drv_priv;
3107
3108 if (!mvm_sta || !mvm_sta->vif) {
3109 IWL_ERR(mvm, "Station is not associated to a vif\n");
3110 return -EINVAL;
3111 }
3112
3113 return iwl_mvm_mac_ctxt_beacon_changed(mvm, mvm_sta->vif);
3114}
3115
507cadf2
DS		 3116#ifdef CONFIG_NL80211_TESTMODE
3117static const struct nla_policy iwl_mvm_tm_policy[IWL_MVM_TM_ATTR_MAX + 1] = {
3118 [IWL_MVM_TM_ATTR_CMD] = { .type = NLA_U32 },
3119 [IWL_MVM_TM_ATTR_NOA_DURATION] = { .type = NLA_U32 },
f6c6ad42 3120 [IWL_MVM_TM_ATTR_BEACON_FILTER_STATE] = { .type = NLA_U32 },
507cadf2
DS		 3121};
3122
3123static int __iwl_mvm_mac_testmode_cmd(struct iwl_mvm *mvm,
3124 struct ieee80211_vif *vif,
3125 void *data, int len)
3126{
3127 struct nlattr *tb[IWL_MVM_TM_ATTR_MAX + 1];
3128 int err;
3129 u32 noa_duration;
3130
3131 err = nla_parse(tb, IWL_MVM_TM_ATTR_MAX, data, len, iwl_mvm_tm_policy);
3132 if (err)
3133 return err;
3134
3135 if (!tb[IWL_MVM_TM_ATTR_CMD])
3136 return -EINVAL;
3137
3138 switch (nla_get_u32(tb[IWL_MVM_TM_ATTR_CMD])) {
3139 case IWL_MVM_TM_CMD_SET_NOA:
3140 if (!vif || vif->type != NL80211_IFTYPE_AP || !vif->p2p ||
3141 !vif->bss_conf.enable_beacon ||
3142 !tb[IWL_MVM_TM_ATTR_NOA_DURATION])
3143 return -EINVAL;
3144
3145 noa_duration = nla_get_u32(tb[IWL_MVM_TM_ATTR_NOA_DURATION]);
3146 if (noa_duration >= vif->bss_conf.beacon_int)
3147 return -EINVAL;
3148
3149 mvm->noa_duration = noa_duration;
3150 mvm->noa_vif = vif;
3151
0166230c 3152 return iwl_mvm_update_quotas(mvm, NULL);
f6c6ad42
JB		 3153 case IWL_MVM_TM_CMD_SET_BEACON_FILTER:
3154 /* must be associated client vif - ignore authorized */
3155 if (!vif || vif->type != NL80211_IFTYPE_STATION ||
3156 !vif->bss_conf.assoc || !vif->bss_conf.dtim_period ||
3157 !tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE])
3158 return -EINVAL;
3159
3160 if (nla_get_u32(tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE]))
a1022927
EG		 3161 return iwl_mvm_enable_beacon_filter(mvm, vif, 0);
3162 return iwl_mvm_disable_beacon_filter(mvm, vif, 0);
507cadf2
DS		 3163 }
3164
3165 return -EOPNOTSUPP;
3166}
3167
3168static int iwl_mvm_mac_testmode_cmd(struct ieee80211_hw *hw,
3169 struct ieee80211_vif *vif,
3170 void *data, int len)
3171{
3172 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3173 int err;
3174
3175 mutex_lock(&mvm->mutex);
3176 err = __iwl_mvm_mac_testmode_cmd(mvm, vif, data, len);
3177 mutex_unlock(&mvm->mutex);
3178
3179 return err;
3180}
3181#endif
3182
622e3f9b
LC		 3183static void iwl_mvm_channel_switch(struct ieee80211_hw *hw,
3184 struct ieee80211_vif *vif,
3185 struct ieee80211_channel_switch *chsw)
3186{
3187 /* By implementing this operation, we prevent mac80211 from
3188 * starting its own channel switch timer, so that we can call
3189 * ieee80211_chswitch_done() ourselves at the right time
3190 * (which is when the absence time event starts).
3191 */
3192
3193 IWL_DEBUG_MAC80211(IWL_MAC80211_GET_MVM(hw),
3194 "dummy channel switch op\n");
3195}
3196
f028905c
LC		 3197static int iwl_mvm_pre_channel_switch(struct ieee80211_hw *hw,
3198 struct ieee80211_vif *vif,
3199 struct ieee80211_channel_switch *chsw)
bd3398e2
AO		 3200{
3201 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
664322fa 3202 struct ieee80211_vif *csa_vif;
f6c34820 3203 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
dc88b4ba 3204 u32 apply_time;
f028905c 3205 int ret;
bd3398e2
AO		 3206
3207 mutex_lock(&mvm->mutex);
664322fa 3208
6b20d774 3209 IWL_DEBUG_MAC80211(mvm, "pre CSA to freq %d\n",
f028905c 3210 chsw->chandef.center_freq1);
6b20d774
LC		 3211
3212 switch (vif->type) {
3213 case NL80211_IFTYPE_AP:
3214 csa_vif =
3215 rcu_dereference_protected(mvm->csa_vif,
3216 lockdep_is_held(&mvm->mutex));
3217 if (WARN_ONCE(csa_vif && csa_vif->csa_active,
3218 "Another CSA is already in progress")) {
3219 ret = -EBUSY;
3220 goto out_unlock;
3221 }
3222
3223 rcu_assign_pointer(mvm->csa_vif, vif);
7ef0aab6 3224
7ef0aab6
AO		 3225 if (WARN_ONCE(mvmvif->csa_countdown,
3226 "Previous CSA countdown didn't complete")) {
3227 ret = -EBUSY;
3228 goto out_unlock;
3229 }
3230
6b20d774 3231 break;
dc88b4ba 3232 case NL80211_IFTYPE_STATION:
4500e133
LC		 3233 /* Schedule the time event to a bit before beacon 1,
3234 * to make sure we're in the new channel when the
3235 * GO/AP arrives.
3236 */
3237 apply_time = chsw->device_timestamp +
3238 ((vif->bss_conf.beacon_int * (chsw->count - 1) -
3239 IWL_MVM_CHANNEL_SWITCH_TIME_CLIENT) * 1024);
dc88b4ba
LC		 3240
3241 if (chsw->block_tx)
3242 iwl_mvm_csa_client_absent(mvm, vif);
3243
4500e133 3244 iwl_mvm_schedule_csa_period(mvm, vif, vif->bss_conf.beacon_int,
dc88b4ba 3245 apply_time);
c6e0a3e0
LC		 3246 if (mvmvif->bf_data.bf_enabled) {
3247 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
3248 if (ret)
3249 goto out_unlock;
3250 }
3251
dc88b4ba 3252 break;
6b20d774
LC		 3253 default:
3254 break;
3255 }
bd3398e2 3256
f6c34820
LC		 3257 mvmvif->ps_disabled = true;
3258
3259 ret = iwl_mvm_power_update_ps(mvm);
3260 if (ret)
3261 goto out_unlock;
f028905c 3262
e198f5e7
AN		 3263 /* we won't be on this channel any longer */
3264 iwl_mvm_teardown_tdls_peers(mvm);
3265
bd3398e2
AO		 3266out_unlock:
3267 mutex_unlock(&mvm->mutex);
f028905c
LC		 3268
3269 return ret;
bd3398e2
AO		 3270}
3271
f6c34820
LC		 3272static int iwl_mvm_post_channel_switch(struct ieee80211_hw *hw,
3273 struct ieee80211_vif *vif)
3274{
3275 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3276 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3277 int ret;
3278
3279 mutex_lock(&mvm->mutex);
3280
a57c688d
LC		 3281 if (vif->type == NL80211_IFTYPE_STATION) {
3282 struct iwl_mvm_sta *mvmsta;
3283
3284 mvmsta = iwl_mvm_sta_from_staid_protected(mvm,
3285 mvmvif->ap_sta_id);
3286
3287 if (WARN_ON(!mvmsta)) {
3288 ret = -EIO;
3289 goto out_unlock;
3290 }
3291
3292 iwl_mvm_sta_modify_disable_tx(mvm, mvmsta, false);
3293
3294 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
c6e0a3e0
LC		 3295
3296 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0);
3297 if (ret)
3298 goto out_unlock;
686e7fe1
LC		 3299
3300 iwl_mvm_stop_session_protection(mvm, vif);
a57c688d
LC		 3301 }
3302
f6c34820
LC		 3303 mvmvif->ps_disabled = false;
3304
3305 ret = iwl_mvm_power_update_ps(mvm);
3306
a57c688d 3307out_unlock:
f6c34820
LC		 3308 mutex_unlock(&mvm->mutex);
3309
3310 return ret;
3311}
3312
c5b0e7c0
EG		 3313static void iwl_mvm_mac_flush(struct ieee80211_hw *hw,
3314 struct ieee80211_vif *vif, u32 queues, bool drop)
3315{
3316 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3317 struct iwl_mvm_vif *mvmvif;
3318 struct iwl_mvm_sta *mvmsta;
a0f6bf2a
AN		 3319 struct ieee80211_sta *sta;
3320 int i;
3321 u32 msk = 0;
c5b0e7c0
EG		 3322
3323 if (!vif || vif->type != NL80211_IFTYPE_STATION)
3324 return;
3325
3326 mutex_lock(&mvm->mutex);
3327 mvmvif = iwl_mvm_vif_from_mac80211(vif);
c5b0e7c0 3328
a0f6bf2a
AN		 3329 /* flush the AP-station and all TDLS peers */
3330 for (i = 0; i < IWL_MVM_STATION_COUNT; i++) {
3331 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[i],
3332 lockdep_is_held(&mvm->mutex));
3333 if (IS_ERR_OR_NULL(sta))
3334 continue;
3335
3336 mvmsta = iwl_mvm_sta_from_mac80211(sta);
3337 if (mvmsta->vif != vif)
3338 continue;
3339
3340 /* make sure only TDLS peers or the AP are flushed */
3341 WARN_ON(i != mvmvif->ap_sta_id && !sta->tdls);
3342
3343 msk |= mvmsta->tfd_queue_msk;
480acbce 3344 }
c5b0e7c0
EG		 3345
3346 if (drop) {
a0f6bf2a 3347 if (iwl_mvm_flush_tx_path(mvm, msk, true))
c5b0e7c0 3348 IWL_ERR(mvm, "flush request fail\n");
480acbce 3349 mutex_unlock(&mvm->mutex);
c5b0e7c0 3350 } else {
480acbce
JB		 3351 mutex_unlock(&mvm->mutex);
3352
3353 /* this can take a while, and we may need/want other operations
3354 * to succeed while doing this, so do it without the mutex held
3355 */
a0f6bf2a 3356 iwl_trans_wait_tx_queue_empty(mvm->trans, msk);
c5b0e7c0 3357 }
c5b0e7c0
EG		 3358}
3359
e5209263 3360const struct ieee80211_ops iwl_mvm_hw_ops = {
8ca151b5
JB		 3361 .tx = iwl_mvm_mac_tx,
3362 .ampdu_action = iwl_mvm_mac_ampdu_action,
3363 .start = iwl_mvm_mac_start,
cf2c92d8 3364 .reconfig_complete = iwl_mvm_mac_reconfig_complete,
8ca151b5
JB		 3365 .stop = iwl_mvm_mac_stop,
3366 .add_interface = iwl_mvm_mac_add_interface,
3367 .remove_interface = iwl_mvm_mac_remove_interface,
3368 .config = iwl_mvm_mac_config,
e59647ea 3369 .prepare_multicast = iwl_mvm_prepare_multicast,
8ca151b5
JB		 3370 .configure_filter = iwl_mvm_configure_filter,
3371 .bss_info_changed = iwl_mvm_bss_info_changed,
3372 .hw_scan = iwl_mvm_mac_hw_scan,
3373 .cancel_hw_scan = iwl_mvm_mac_cancel_hw_scan,
1ddbbb0c 3374 .sta_pre_rcu_remove = iwl_mvm_sta_pre_rcu_remove,
8ca151b5
JB		 3375 .sta_state = iwl_mvm_mac_sta_state,
3376 .sta_notify = iwl_mvm_mac_sta_notify,
3377 .allow_buffered_frames = iwl_mvm_mac_allow_buffered_frames,
3e56eadf 3378 .release_buffered_frames = iwl_mvm_mac_release_buffered_frames,
8ca151b5 3379 .set_rts_threshold = iwl_mvm_mac_set_rts_threshold,
1f3b0ff8 3380 .sta_rc_update = iwl_mvm_sta_rc_update,
8ca151b5
JB		 3381 .conf_tx = iwl_mvm_mac_conf_tx,
3382 .mgd_prepare_tx = iwl_mvm_mac_mgd_prepare_tx,
07ecd897 3383 .mgd_protect_tdls_discover = iwl_mvm_mac_mgd_protect_tdls_discover,
c5b0e7c0 3384 .flush = iwl_mvm_mac_flush,
35a000b7
DS		 3385 .sched_scan_start = iwl_mvm_mac_sched_scan_start,
3386 .sched_scan_stop = iwl_mvm_mac_sched_scan_stop,
8ca151b5
JB		 3387 .set_key = iwl_mvm_mac_set_key,
3388 .update_tkip_key = iwl_mvm_mac_update_tkip_key,
3389 .remain_on_channel = iwl_mvm_roc,
3390 .cancel_remain_on_channel = iwl_mvm_cancel_roc,
8ca151b5
JB		 3391 .add_chanctx = iwl_mvm_add_chanctx,
3392 .remove_chanctx = iwl_mvm_remove_chanctx,
3393 .change_chanctx = iwl_mvm_change_chanctx,
3394 .assign_vif_chanctx = iwl_mvm_assign_vif_chanctx,
3395 .unassign_vif_chanctx = iwl_mvm_unassign_vif_chanctx,
b08c1d97 3396 .switch_vif_chanctx = iwl_mvm_switch_vif_chanctx,
8ca151b5 3397
5023d966
JB		 3398 .start_ap = iwl_mvm_start_ap_ibss,
3399 .stop_ap = iwl_mvm_stop_ap_ibss,
3400 .join_ibss = iwl_mvm_start_ap_ibss,
3401 .leave_ibss = iwl_mvm_stop_ap_ibss,
8ca151b5
JB		 3402
3403 .set_tim = iwl_mvm_set_tim,
3404
622e3f9b 3405 .channel_switch = iwl_mvm_channel_switch,
f028905c 3406 .pre_channel_switch = iwl_mvm_pre_channel_switch,
f6c34820 3407 .post_channel_switch = iwl_mvm_post_channel_switch,
bd3398e2 3408
1d3c3f63
AN		 3409 .tdls_channel_switch = iwl_mvm_tdls_channel_switch,
3410 .tdls_cancel_channel_switch = iwl_mvm_tdls_cancel_channel_switch,
3411 .tdls_recv_channel_switch = iwl_mvm_tdls_recv_channel_switch,
3412
507cadf2
DS		 3413 CFG80211_TESTMODE_CMD(iwl_mvm_mac_testmode_cmd)
3414
8ca151b5
JB		 3415#ifdef CONFIG_PM_SLEEP
3416 /* look at d3.c */
3417 .suspend = iwl_mvm_suspend,
3418 .resume = iwl_mvm_resume,
3419 .set_wakeup = iwl_mvm_set_wakeup,
3420 .set_rekey_data = iwl_mvm_set_rekey_data,
3421#if IS_ENABLED(CONFIG_IPV6)
3422 .ipv6_addr_change = iwl_mvm_ipv6_addr_change,
3423#endif
3424 .set_default_unicast_key = iwl_mvm_set_default_unicast_key,
3425#endif
3426};
ubuntu-bionic-kernel mirror